How to make a Fake login page of Instagram/Facebook/Twitter and stoling passwords

requirements:
– kali linux
– setoolkit (Social Engineering Tool Kit).
– an internet connection

Alternatively, a linux distro is sufficient. You can download setoolkit from github:
https://github.com/trustedsec/social-engineer-toolkit
The installation is simple and is described on the github page, so we will skip this step.

let’s begin
First we have to start setoolkit.
Open the terminal and write setoolkit
You will see a screen like this:

Let’s select Social-Engineering Attacks writing 1 and press enter.

Now you will see an other screen like this.

Digit 2 and press enter.

Now we are interested to the Credential harvester attack method.

So Let’s digit 3.

 

One other scree. Now we want to clone a web site, like Instagram or Facebook.

So let’s digit 2.

Now we have two solutions. We can create a domain through noip, ngrok, or other applications. I leave it to you. I will create a guide to using ngrok and I will attach it in this guide to help you.

Alternatively, you can save your website on your pc and then copy it to your web server, like apache. Remember to port forward to port 80 (HTTP) and also to port 443 (HTTPS) in your router, to make your site visible to everyone outside your network.

So just press enter if you do not want to use ngrok or noip, otherwise type your address here and finish typing http://instagram.com as in the picture.

Now let’s send you link to the victim 😉

Enjoy and stay safe. D3x3