[m0rbidang3l]

So, the main reason people don't log in to your phisher is simple: the url address makes it painfully obvious that it is a phisher. So, why not make them think it is actually the WoW website.


Using the methods describes in [Only registered and activated users can see links. ] you will be able to do exactly that. It will take time and patience, but it will be well worth when the accounts start rolling in.

[Gelormino]

Woah Nice guide m0rbidang3l !!

Id rep you if I could D:

[texture46]

Wow nice guide!

[Sephiroth]

Hawt nice find +rep

[-Riku-]

Nice find man, you deserve +rep from Bob!,

Now you feel special...

[lolk2]

On PC FF it gives me a warning prompt when entering a url like [Only registered and activated users can see links. ] etc. Also, FF doesn't load all hex url's for me, for some reason (like %45%23%13%67.com)

In IE everything works great tho.

[m0rbidang3l]

Originally Posted by lolk2

On PC FF it gives me a warning prompt when entering a url like [Only registered and activated users can see links. ] etc. Also, FF doesn't load all hex url's for me, for some reason (like %45%23%13%67.com)

In IE everything works great tho.

well, firefox is much more secure than IE, so thats understandable. besides, most people still use IE (for whatever reason)

[Tcl70]

the article is great BUT there is 1 problem :P

An Increasingly Common Exception
As IP address space becomes more valuable, web hosting services increasingly use systems that place many websites at one IP address. The server differentiates between sites by means of the domain name portion of the URL. Sites on such a server cannot be addressed using the IP address alone.

PS: as far as i know there is a Security patch for IE7 that prevents this vulnerability

[lolk2]

Originally Posted by Tcl70

the article is great BUT there is 1 problem :P



PS: as far as i know there is a Security patch for IE7 that prevents this vulnerability

if it's a shared server it can still be accessed by [Only registered and activated users can see links. ]

[muhaahaa]

SICK +rep ill never get round to doing it tho but still amazing

[Tcl70]

Originally Posted by lolk2

if it's a shared server it can still be accessed by [Only registered and activated users can see links. ]

as far as i can tell that works only on some hosts

Example
http_://viktor[dot]gamerworld.nl/
http_://66[dot]98.190.17/viktor/

[cybersaiyan]

this doesn't even work on IE6, much less IE7... or at least the IE6 that comes with XP SP2. I don't use IE usually but tried it today and did some googling, saw microsoft has a patch that disallows http://unamew@domain

any other ideas? :/

[Lysvir]

Doesnt work with hyperphp[dot]com?
Like whatever[dot]hyperphp[dot]com
Cant ping it :/

[X-Gogeta]

That's common sense to any good scammer / website owner. I doubt anyone just reading this will understand it.

[OVVeN]

So this doesn't work? I could learn it and understand it, but that would take some time I don't want to waste if it doesn't work.