Make your website appear when someone navigates to a website

[escoth]

It was just a simple thing. For example, if i edited the hotmail login page(and stored it locally) so that when you enter your information in to form the e-mail and password was e-mailed to me(or stored on a local file etc.) how could i make it so when the user navigated to the hotmail login page(or any other page) it showed my fake page but normal signs stayed the same such as url doesn't change to a local address?

thanks,

[Draymire]

That would be phishing and is generally not supported by anyone here.

[fabianhjr]

Phising is illegal. Read tough, you can find plenty of information about it online.

[1amW1z4rd]

I've used things like this on my local LAN as a prank with some friends, NEVER do this to someone that you wouldn't mind doing it to you!!!

I had two options when I did it. You need to use a MITM of some sort. I used ettercap as it's such a great tool. You can either lie about the DNS (what IP address the host is at) or, lie about the ARP (or some other similar MITM) which tells the computer that the way to route the packets to get to the desired IP is through your computer (your MAC address).

Do no evil, blah blah blah.

[sanddbox]

Ignoring the obvious illegal intentions, it really depends on your access to the victim. If you have direct access, editing the hosts file would be optimal.

[Monica]

It was just a simple thing. For example, if i edited the hotmail login page(and stored it locally) so that when you enter your information in to form the e-mail and password was e-mailed to me(or stored on a local file etc.) how could i make it so when the user navigated to the hotmail login page(or any other page) it showed my fake page but normal signs stayed the same such as url doesn't change to a local address?

thanks,

You're clearly hacking.

[Goatboy]

You're clearly hacking.

You're clearly only posting to make it appear as if you are active on the forums.

[Monica]

I was upset when I realized I've been inactive. Now I'm upset that you revealed my intention of being on the forum today.

[msbachman]

It was just a simple thing. For example, if i edited the hotmail login page(and stored it locally) so that when you enter your information in to form the e-mail and password was e-mailed to me(or stored on a local file etc.)

The most difficult part of this is going to be getting them to navigate to the 'login' page and think it's legitimate. Other than that, it's easily done.

how could i make it so when the user navigated to the hotmail login page(or any other page) it showed my fake page but normal signs stayed the same such as url doesn't change to a local address?

No, you can't do that. Besides, there's a reasonable chance the person won't check. Just make sure that the page looks legitimate for starters. A slight extra step might be taking the login credentials and after logging/emailing them, redirecting them through the actual site via POSTing the same info you logged. That way, it's continuous; people will be less likely to wonder what the heck happened.

Ideally you could seek a domain name similar to the one you're trying to impersonate; however, having the identical one isn't possible unless you can find some way to intervene in DNS or something. I don't know much about how that's done.

Of course, if this is with some unknowing third party, it's illegal and beyond the realm of getting help here.

[fabianhjr]

There is a recent paper on tabnapping. This method uses javascript so you have a legitimate page and then a fake one.
http://www.azarask.in/blog/post/a-new-type-of-phishing-attack/

At least I think it is recent 0_o