SOCIAL ENGINEERING

PHISHING

CREDENTIAL PHISING

-Phishing is where a malicious person tries to trick you into giving away sensitive information e.g; passwords and personal details by pretending to be a trusted source.

• We will us ZPhisher in Kali linux. Install ZPhisher from github.com and it should look like this after typing the commands in the terminal.

• In this case we will be using google, so we will type “03” then press enter

• Click on “02” Gmail new login page then press enter

• We will use “02” cloudflared then it will ask if we need a custom port then we say “N”. This is how it should look after

• It will then ask us whether we want to mask the url and in this case we will mask the url in order for it to look more secure for the target.
• I will mask my url as and send it to one of my family members as an example. This is how it should look after masking

• So I picked the first url which was https://seven-won-indication-particles.trycloudflare.com/login.html and sent it to my target
• This is how the link will look in your browser

• I sent this to my target and here was the outcome

• As you can see we were able to find the targets email and password. I later advised them to change their password and beware of similar links
• We can see that the account is “trendsevents51@gmail.com” and password is “Mombasa202030” and it also showed us the IP address.
• That is how you phish someone’s details using ZPhisher.