Tab Napping, Easy way to send Phishing Pages
Monday, June 18, 2012
8
comments
Phishing is the easiest and most popular way of email account hacking. But there is one thing that is always hard in this attack. We all know how to create fake login pages. But most of us fail while sending this phishing page to the victim. This is the most tricky part of the attack where most of the newbie fail.
Read: Ideas by which we can send phishing pages to victim
Now a days a new way of phishing is used by hackers. This is called tab napping. Tab napping is also written as Tab nabbing in most of other references. I also wrote about it in one of my previous posts. I also posted a JavaScript code which is used for Tab napping as a Tab napping script .
But many of my readers are still facing problems in this script. So i decided to write this post.
The idea behind this is very simple. First of all i suggest you to read my last posts on tab napping and then download the script.
Tab napping is all about the relation of 2 pages. suppose Page A and Page B.
Victim was viewing page A in a tab of a browser and then left this idle and and now using some other website in another tab of browser .After some time the page A will automatically change to Page B. This Page B is your phishing page. Idea is to confuse the victim in multiple tabs of browser.
Tab Napping in detail
Make a web page and use the tab napping script in that page say it page A. That script will not affect the layout or content of the page. This script will check for user actions. If the page is idle for some time, this script will redirect this page to a pre-specified page which may be your phishing page. You have to specify this page in the script. Be sure to change this in script.
check script for this line...
timerRedirect = setInterval("location.href='http://www.gmail.com'",10000);
this line will redirect to Gmail after 10 sec. Change this location to the address of your phishing page. This line is used 2 times in the script so change is both lines.
so page A with tab napping script will redirect to phishing page B.
Now send the link of the page A to your victim. This is a normal page. If the page is idle for some time it will be changed to page B otherwise no effect.
Read: Ideas by which we can send phishing pages to victim
Now a days a new way of phishing is used by hackers. This is called tab napping. Tab napping is also written as Tab nabbing in most of other references. I also wrote about it in one of my previous posts. I also posted a JavaScript code which is used for Tab napping as a Tab napping script .
But many of my readers are still facing problems in this script. So i decided to write this post.
The idea behind this is very simple. First of all i suggest you to read my last posts on tab napping and then download the script.
Tab napping is all about the relation of 2 pages. suppose Page A and Page B.
Victim was viewing page A in a tab of a browser and then left this idle and and now using some other website in another tab of browser .After some time the page A will automatically change to Page B. This Page B is your phishing page. Idea is to confuse the victim in multiple tabs of browser.
Tab Napping in detail
Make a web page and use the tab napping script in that page say it page A. That script will not affect the layout or content of the page. This script will check for user actions. If the page is idle for some time, this script will redirect this page to a pre-specified page which may be your phishing page. You have to specify this page in the script. Be sure to change this in script.
check script for this line...
timerRedirect = setInterval("location.href='http://www.gmail.com'",10000);
this line will redirect to Gmail after 10 sec. Change this location to the address of your phishing page. This line is used 2 times in the script so change is both lines.
so page A with tab napping script will redirect to phishing page B.
Now send the link of the page A to your victim. This is a normal page. If the page is idle for some time it will be changed to page B otherwise no effect.
please comment below if this post is useful for you..
:)
Categories:
Phishing,
Tabnapping
8 comments:
Please tell me how to send the fake page to the victim?
in tab napping no need to send fake page. send you website having tab napping script..
Hey plz tell me hw to use this script in a webpage ??? I mean where do i have 2 copy this to my web page???
@paras: see another post under this section
http://www.hackingtricks.in/2010/11/download-tab-napping-script-how-to-do.html
this is a simple javascript code use inside head tag of the webpage
Thanks man =)
please tell me in detail about tab napping
this is my e-mail id divakar.divakar.k@gmail.com
hi.i am danish. actually didnt understand how to hack so please can you tell me from begin coz i dont know so much about programing. and plz suggest me a simple method for hacking the acount.
heLlo..i Hav DwLodEd tabnApPing scrIpt bT hw To UsE it Sir..!!??
Post a Comment