We’ll create login page that resemble the original Photobucket login page. The user is fooled to believe the fake Photobucket page to be the real one and enter his/her password. But once the user attempts to login through these pages, his/her Photobucket login details are stolen away
Download fake Photobucket login page from this LINK
Fake photobucket page contains 3 files : index.html , pass.php, photobucket.html
It is similar to the orginal Photobucket login page http://photobucket.com/login. There are some differences in the HTML code:
Under form id="gaia_loginform" , action attribute is changed to "pass.php" . It lets you to run pass.php script. , after clicking on the Login button .
Photobucket user visits index.html , he means that it's real photobucket and type login information . After clicking login button , pass.php will be run . Pass.php will store typed information to the photobucket.htm and it will redirect user to the photobucket.com.
Note: This guide is only for education purpose.