anyone how people put a key logger into a webpage or how they get your password from you typing in a webpage?

Question

anyone know how a hacker or phisher puts a key logger or what ever they do to the web page that makes it so they get your info from a web page i am doing a school project on phishing/hacking techniqs of todays hackers
any help would be great

ok so how do they make a form anyone got any details for like frontpage.. i think frontpage makes forms right

Just wanted to see how my social engineering skills are see how easy it is to get information from someone and no I am not a kid more like a man thanks all for the information

Answer 1

yes i do. but it doesn't involve keyloggers.

when you enter your username/password into a site they have created, which looks identical to a real website, the username and password are then added to a hidden guestbook or emailed to the 'hacker' (and i use the term loosely) and an error is presented on-screen.

you're then redirected to the real login page of the site they were pretending to be, and you assume you just typed your password wrong the first time and log in to the real site normally - not knowing the original site was a fake which logged your password.

they vary in complexity, from the very easy (change one line of the yahoo login page) to the very complex (encoded source code of webpages to hide the destination of the usernames and passwords).

obviously the more complex version of this scam tends to come from organised criminals in russia who're copying bank login pages to get bank details of people with a view to emptying bank accounts.

this is all you should need to know for your project, because obviously i wouldn't tell you exactly how to create such a page.

EDIT: you're not even a very good liar are you 'clint'? kids... *sigh* oh hang on, don't tell me - your school project requires you to make a webpage capable of stealing someones password??

well your 'social engineering' skills are even worse than your search engine skills (it's hardly difficult to find out) because it was obvious from your original question exactly what you were after - which is why i didn't specify details.

i don't know anyone over the age of 14 with a life that bothers themselves with something so childish as trying to get peoples passwords, if you ARE over that age then that's just all the more tragic lol :)

Answer 2

There are different ways this can be done.
You can download a keylogger from say a java applet if it's signed or if a hidden application has been embedded in the applet or another way is if the site or page has been hacked it can contain a hidden field.

There are more ways that's just a couple.

Answer 3

in a webpage they make a fake login form that emails them your username and password

Answer 4

Yeah yeah me my name is frankenstein