1 00:00:00,630 --> 00:00:07,230 In this lesson, we will talk about website phishing that is making a clone of a website like Facebook, 2 00:00:07,230 --> 00:00:12,210 Gmail, etc. So as always, run as a toolkit. 3 00:00:12,750 --> 00:00:18,330 And this time we will select the second option which says Website Attack Vectors. 4 00:00:19,350 --> 00:00:26,190 Now we will select a third one which says credential harvester attack method because we want to steal 5 00:00:26,190 --> 00:00:28,080 the credentials of our target. 6 00:00:28,230 --> 00:00:29,130 So three. 7 00:00:30,350 --> 00:00:34,160 Now select the second option, which is site cloner. 8 00:00:34,430 --> 00:00:35,060 Why? 9 00:00:35,180 --> 00:00:40,700 Because the second method will completely clone a website of your choosing and allow you to utilize 10 00:00:40,700 --> 00:00:41,900 the attack vectors. 11 00:00:43,490 --> 00:00:51,110 So second and enter your IP address for the purpose of post back. 12 00:00:52,430 --> 00:00:54,790 So this is the IP offer. 13 00:00:55,190 --> 00:00:56,330 So hit enter. 14 00:00:58,150 --> 00:01:00,850 Now it says Enter the URL to clone. 15 00:01:01,300 --> 00:01:06,070 So enter your URL of the website which you want to make clone of. 16 00:01:06,250 --> 00:01:15,600 So w w w dot facebook dot com and hit enter and it will create a clone of facebook dot com for you. 17 00:01:15,610 --> 00:01:18,250 Then you have to share that link with your target. 18 00:01:18,370 --> 00:01:24,970 Then your target opens the link and when he enters the information like username password, then you 19 00:01:24,970 --> 00:01:27,550 will get them here on your screen. 20 00:01:27,760 --> 00:01:29,530 But there is one problem. 21 00:01:29,800 --> 00:01:38,410 For this purpose you have to keep your PC on 24 by seven until your target clicks on it and the rest 22 00:01:38,410 --> 00:01:39,070 of the world. 23 00:01:39,400 --> 00:01:39,970 Right. 24 00:01:40,360 --> 00:01:42,910 So there is a better alternative to this. 25 00:01:43,630 --> 00:01:50,320 So open your browser and open a website which says Zedd Shadow Dot Info. 26 00:01:51,520 --> 00:01:56,380 Create an account with this and this website will help you with phishing attacks. 27 00:01:56,830 --> 00:02:04,300 So it will go into create a clone for Facebook, Gmail, Instagram, etc. Simply create an account with 28 00:02:04,300 --> 00:02:09,430 them and then they will provide you the link, then share the link with your target. 29 00:02:09,700 --> 00:02:14,080 Now you don't need to log in until your target clicks on the link. 30 00:02:14,620 --> 00:02:17,620 You can log out and do your work right. 31 00:02:17,770 --> 00:02:25,780 This website keeps your link live 24 by seven, so when your target clicks on the link and enter his 32 00:02:25,780 --> 00:02:28,210 information, you use the credentials. 33 00:02:28,660 --> 00:02:32,170 This website will record them for you, right? 34 00:02:32,170 --> 00:02:34,330 So you can just use this website. 35 00:02:35,380 --> 00:02:39,490 So this is how you can perform website phishing.