Hack Like a Pro: How to Clone Any Website Using HTTrack « Null Byte :: WonderHowTo

Welcome back, my hacker novitiates!Recently, I demonstrated a hack where you couldredirect traffic intended for one site, such as bankofamerica.com, to your fake website. Of course, to really make this work, you would need to make a replica of the site you were spoofing, or better yet, you could simply simply make a copy of the original site and host it on your own server!HTTrackis just the tool for doing that.HTTrack takes any website and makes a copy to your hard drive. This can be useful for searching for data on the website offline such as email addresses, information useful for social engineering, hidden password files (believe me, I have found a few), intellectual property, or maybe replicating a login page for aEvil Twinsite to capture login credentials.Unfortunately, HTTrack is not included inKali, so we will need to download and install it. Fortunately, though, it is included in the Kali repository, so all we need to do is open the software repository and download and install it.HTTrack comes in both a Windows and a Linux version. For those of you who refuse to take off the training wheels, you can download and installHTTrack for Windowson its website.Step 1: Download & Install HTTrackFrom Kali, we need to navigate to "System Tools" and then "Add/Remove Software," like in the screenshot below.That will open a screen like the one below. Notice the window in the upper left-hand corner next to the "Find" button. Enter "httrack" there and it will find the packages you need to install HTTrack.You can also install it by typing the following in a terminal.kali > apt-get install httrackStep 2: Use HTTrackNow that we have installed HTTrack, let's start by looking at the help file for HTTrack. When you downloaded and installed HTTrack, it placed it in the/usr/bindirectory, so it should be accessible from any directory in Kali as/usr/binis in the PATH variable. Let's type:kali > httrack --helpI've highlighted the key syntax line in the screenshot above. The basic syntax is the following, where-Ostands for "output." This switch tells HTTrack where to send the website to.kali > httrack <the URL of the site> [any options] URL Filter -O <location to send copy to>Using HTTrack is fairly simple. We need only point it at the website we want to copy and then direct the output (-O) to a directory on our hard drive where we want to store the website. One caution here, though. Some sites are HUGE. If you tried to copy Facebook to your hard drive, I can guarantee you that you do not have enough drive space, so start small.Step 3: Test HTTrackIn an earlier tutorial onhacking MySQL databasesbehind websites (MySQL is the most widely used database backend behind websites), we used a website that we could hack with impunity calledwebscantest.com. Let's try to make a copy of that site to our hard drive.kali > httrackhttp://www.webscantest.com-O /tmp/webscantestAs you can see, we successfully made a copy of all the pages of this site on our hard drive.Step 4: Explore the Site CopyNow that we have captured and copied the entire site to our hard drive, let's take a look at it.We can open the IceWeasel browser (or any browser) and view the contents of our copied site to the location on our hard drive. Since we copied the web site to/tmp/webscantest, we simply point our browser there and can view all the content of the website! If we point it to/tmp/webscantest/www.webscantest.com/login.html, we can see that we have an exact copy of the login page!Hmmm...what could we possibly use that for???Step 5: Copy Our Favorite Web SiteNow, let's try HTTrack on our favorite website, wonderhowto.com. Let's try to make a copy of a forum post I wrote last week about the CryptoLocker hack. First, let's open that pageright hereand copy the address into Kali after the HTTrack command and then the location where you want send the copy to.kali> httrackhttps://null-byte.wonderhowto.com/forum/cryptolocker-innovative-creative-hack-0151753/-O /tmp/crytolocYou can send the copied website to any location, but I sent mine to/tmp/crytoloc. When we do so, HTTrack will go intoNull Byte, grab that webpage, and store an exact copy of it on your hard drive. Notice it also tells us that it is 208 bytes.As you can see below, we were able to copy my Null Byte article on CryptoLocker to my Kali hard drive and open an exact copy of it with my browser.If you are trying to find information about a particular company for social engineering or trying to spoof a website or login, HTTrack is an excellent tool for both tasks. Many of you have been asking about how to create a clone website fordnsspoofor grab credentials for anEvil Twin, now you have the tool to do so!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseOriginallaptopimage via ShutterstockRelatedHow To:Download websites for offline viewing with HttrackHow To:Grab Syl Flores's Site using HTTRACK & WiresharkWeb Prank:Create Your Own Legit-Looking News Stories by Editing Current Ones OnlineHack Like a Pro:How to Hack Web Apps, Part 2 (Website Spidering with WebScarab)How To:Quickly Look Up the Valid Subdomains for Any WebsiteHack Like a Pro:How to Hack Like the NSA (Using Quantum Insert)How To:Phish Social Media Sites with SocialFishHow To:You Can Easily Hack Instagram for a Crazy Amount of Likes (But You Totally Shouldn't)Hack Like a Pro:How to Hack Web Apps, Part 1 (Getting Started)How To:Clone Macbook Pro Hard Drive to SSDHow To:Easily Generate Hundreds of Phishing DomainsHow To:Hack Lets You Fully Activate a Bootleg Copy of Windows 8 Pro for FreeHow To:Facebook Credentials RevisitedHow To:Clone yourself with Final Cut Pro or ExpressHack Like a Pro:Metasploit for the Aspiring Hacker, Part 10 (Finding Deleted Webpages)Hack Like a Pro:How to Hack Web Apps, Part 5 (Finding Vulnerable WordPress Websites)How To:The Safest Way to Disable ALL Bloatware on Your Galaxy S10The Clone Wars:The Russians Flirt with Instagram & Fake Follower Vending MachinesHow To:Talk to yourself with the help of Final Cut ProHow To:Achieve a cloning effect in Final Cut Express/ProHow To:Make Copies of Your Apps to Stay Logged into Multiple Accounts at OnceHow To:The Official Google+ Insider's Guide IndexNews:Extra Income From BloggingNull Byte:Never Let Us DieNews:Anonymous Hackers Replace Police Supplier Website With ‘Tribute to Jeremy HammNews:Branches of Government-JudicialCamera Plus Pro:The iPhone Camera App That Does it All