
~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
 ##########################################02.09.02###
    _____              _____   _   _   ____    ____
   | ____|   _____    | ____| | | | | |  = |  | ___|
   | |      |     |   | |     | | | | | |\ \  | __|
   | ====    =====    | ====  |  =  | | | \ \ |    |
    =====[c-cure]==================================tm
 #####################################################
~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~

                 .-~    presents    ~-.  

         -= Fake Yahoo! Messenger Login Screen =-  
                ._                    _.
                   ~ expl0it_shad0w ~
 
-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

o0 - Table Of Contents - 0o

-= Section 1 =-

A> Introduction
B> Instructions
C> Features
D> Known Bugs/Issues
E> Contacting Me



-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

-= Section 1,A =-

-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

Introduction

Theres alot of Fake Login Screens for Yahoo! out there. But Ive tried to make one as real lookign as possible.
Its got lots of features that others dont, aswell as both remote and physical log file access.

There are allso draw backs which are listed below under 1C. This version has been tested with win 9x only.
If you want to test with Xp or ME then its up to you, but theres no telling what could happen.




-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

-= Section 1,B =-

-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

Instructions

Follow these instructions.

1> Place The filename "YPager.exe" any where on there system ( HINT: somewhere hidden ).

2> Open it up and get the user to login/ or wait untill they login. The program does the rest. 

( You can use both physical and remote log file access to see what user/pass the user has entered.
You need to use an Internet Browser, like MSIE )

3> 
< Physical Access >

There are 2 ways of doing this. 
1. Viewing the RAW log file with note pad. The file with the recorded passwords is, c:\windows\yloginwin32.htm
NOTE: You will allso see c:\windows\YPager.exe allso exists just leave this here.

2. When you open the Fake Yahoo! Messenger Login Screen you will see a text box, with Search Yahoo! inside it,
just remove this text and type in  "c-cure"  without the quotes then hit search. This will show you all
recorded user/pass's on the computer.

< Remote Access >

Connect to there machine on port 80 with an Internet browser. Type in there IP address into
it and just hit Enter. For example if the victims IP address was 127.0.0.1 you type in http://127.0.0.1 or
just 127.0.0.1.

NOTE: There ip will not be 127.0.0.1 so dont put it in. Its just an example.




-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

-= Section 1,C =-

-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

Features

* Ive delayed the application startup-time like the real Yahoo! Messenger has.
* Ive added a trayicon, which allows you to control the fake login screen like the real-thing.
* When you open Fake YPager.exe it copies itself to the windows directory and then starts the HTTP server.
* Added HTTP server for remote access.
* The application has all the same images/graphics as the real one.
* When the victim types in his username/password Fake YPager.exe displays an error then loads the real YPager.
* Added a reg string to make Fake YPager.exe load up on windows start ( Better Remote Access ).
* The preferences can also be changed like the real thing. ( NOTE: They do nothing tho... ).
* Fake error messaages are shown, when the user clicks for help.
* Added the correct file,version,copyright information when you choose the files properties.



-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

-= Section 1,D =-

-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

Known Bugs/Issues

As allways there are certain things you should be aware of. If you have any more probs give me feedback.
All the problems below are being worked on, for the next release.

* The Fake YPager.exe Icon in the tray is not the real one used.
* The Main form can not be resized as of yet.
* The Main form allways starts in the middle of the screen.
* All other forms, are placed in the same location as the main form, onced shown.
* The Search Yahoo! text box, takes 2 clicks to get rid of it, as the real one takes 1.
* The Status bar, on the fake one doesnet have the icon used in the real one.


The above problems are not exactly noticable, but certain users could guess it is a fake.

Know of any more? Give me feedback. And any help is welcome, providing the person/groups that are giving help
know and use delphi well...




-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

-= Section 1,E =-

-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

Contacting Me

If you have some comments, suggestions or bugs then please contact me at etc_passwd01@yahoo.co.uk
Thanks to all the peeps with support and good feedback, as ever my mail box gets floded with peeps asking how
to hack hotmail. Please dont do this, you wont get one back.

Greets goto:

D41MG3 - what can I say..
cpredsox - alot of spunk
fly_doggz - fdh
binary_fision - liquid_phire
GhosTheorY - Thanks for you support
and all the other cool peeps ive come accross while I was on my travels.

-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-/-

                -=  Copyright 2001 - 2002 =-
               -= expl0it_shad0w of c-cure =-
                          -= Late =-
