Father
Professional
- Messages
- 2,602
- Reaction score
- 849
- Points
- 113
Requirements:
Webmail setuped
Scampage (comes after tutorial)
CPANEL/WHM
ANTIBOT PW KEY (OPTIONAL)
KILLBOT KEY (OPTIONAL)
NUMVERIFY KEY (OPTIONAL)
If you can't host it, view our other tutorial on how to install xampp for windows and for linux apache2:
Configuration File(s):
freak/main.php (main config)
freak/zembut/vendor/config (admin panel config)
That's the admin configuration file, please leave it like it is. Since people doing "Phishing Kit" researches and they found admin panel, FREAKZBROTHERS trick them and made a fake login as far as i understand. You just have to access freak/zembut/ to get into the admin panel.
Main Configuration File.
Explanation comes down below...
email_result here you have to put the mail where the result should be sent.
sender_mail this is the sender mail, which can be customized as your wish.
site_parameter this is the subfolder name, in our case signin, if you change your victim will not be forwarded to the folder, so keep it.
site_password is used to protect the page againt some bots.(keep it disabled, it raise some errors to me)
send_login is used to manage if scampage sends result or not (yes=send, no=not)
antibot.pw if this is yes or YES then you need an api key to avoid more bots(PAID SERVICE)
double_cc let victims fill out cc page twice
get_billing to get billing address
get_bank displays the bank page (yes = display | no = not (same for billing and double cc)
get_email is used for mail access
get_photo for ID upload
onetime if yes (NOT YES, please change to lowercase!) then ip of victim is written to a file and victim can't access again
style used for styles like locked or invoice
The other settings with block you will surely be able to guess what this means.
numverify_api API key to check phone carrier (numverify.com...FREE & PAID SERVICE )
? FOLDERS
zembut for admin panel access
ap for amazon page, which is the main page
assets for the images, css and javascripts...
cgi-bin a random empty folder
CrawlerDetect an antibot & crawler detection
result results are here
security bots blocker & onetime
? FILES
additional.php country cases of SSN validations
blacklist.php checks from security blacklisted ips
blocker.php antibots
blocker2.php antibots.pw checker
crawlerdetect.php component from CrawlerDetect
index.php forwarder to ap/ folder
lang.php different page languages
main.php settings file & functions
onetime.php adds victims ip to onetime and denies second access.
session.php checks the session key
killbot.ini requires a killbot.org api key
antibot.ini requires an antibot.pw api key
Main page looks like this...
Depending on the style setting you choosed, it will prompt this.
Pages doesn't look updated but it's an old page if you have skill you can update it
Billing
Card + validation
Bank
CC upload
Finish page
Admin Panel
Webmail setupedScampage (comes after tutorial)CPANEL/WHMANTIBOT PW KEY (OPTIONAL)KILLBOT KEY (OPTIONAL)NUMVERIFY KEY (OPTIONAL)If you can't host it, view our other tutorial on how to install xampp for windows and for linux apache2:
Configuration File(s):freak/main.php (main config)
freak/zembut/vendor/config (admin panel config)
That's the admin configuration file, please leave it like it is. Since people doing "Phishing Kit" researches and they found admin panel, FREAKZBROTHERS trick them and made a fake login as far as i understand. You just have to access freak/zembut/ to get into the admin panel.
Main Configuration File.
Explanation comes down below...
email_result here you have to put the mail where the result should be sent.
sender_mail this is the sender mail, which can be customized as your wish.
site_parameter this is the subfolder name, in our case signin, if you change your victim will not be forwarded to the folder, so keep it.
site_password is used to protect the page againt some bots.(keep it disabled, it raise some errors to me)
send_login is used to manage if scampage sends result or not (yes=send, no=not)
antibot.pw if this is yes or YES then you need an api key to avoid more bots(PAID SERVICE)
double_cc let victims fill out cc page twice
get_billing to get billing address
get_bank displays the bank page (yes = display | no = not (same for billing and double cc)
get_email is used for mail access
get_photo for ID upload
onetime if yes (NOT YES, please change to lowercase!) then ip of victim is written to a file and victim can't access again
style used for styles like locked or invoice
The other settings with block you will surely be able to guess what this means.
numverify_api API key to check phone carrier (numverify.com...FREE & PAID SERVICE )
? FOLDERS
zembut for admin panel accessap for amazon page, which is the main pageassets for the images, css and javascripts...cgi-bin a random empty folderCrawlerDetect an antibot & crawler detectionresult results are heresecurity bots blocker & onetime? FILES
additional.php country cases of SSN validationsblacklist.php checks from security blacklisted ipsblocker.php antibotsblocker2.php antibots.pw checkercrawlerdetect.php component from CrawlerDetectindex.php forwarder to ap/ folderlang.php different page languagesmain.php settings file & functionsonetime.php adds victims ip to onetime and denies second access.session.php checks the session keykillbot.ini requires a killbot.org api keyantibot.ini requires an antibot.pw api keyMain page looks like this...
Depending on the style setting you choosed, it will prompt this.
Pages doesn't look updated but it's an old page if you have skill you can update it
Billing
Card + validation
Bank
CC upload
Finish page
Admin Panel
