Tutorial Online

"Phishing Method Hack Facebook Account using WAPKA" 

 First create a new wapka account from the link below.

Create Your Own Facebook Mobile Phishing Phishing Page Using Wapka

Step 2: Editing Wapka Texts

Login to your Wapka account. Goto Settings>Edit text> Forum/chat and change the following words,
Name: Email or Phone
Text: Password
Submit: Log In
Its shown in the screenshot below.

Create Your Own Facebook Mobile Phishing Phishing Page Using Wapka

Click Edit to save and Login to your account in ADMIN mode.

Step 3: Create a new forum

Create a new forum to save all hacked usernames and passwords in your site.
You can do it by Edit Site>Forum

Create Your Own Facebook Mobile Phishing Phishing Page Using Wapka

Get inside your newly created forum and note down its Forum ID. You can find it at the right bottom corner of the forum. Its shown below

Step 4: Change Forum Visibility
The forum we create above will be visible to everyone. Now we have to change its visiblity, so that admin can only view the hacked usernames and passwords.
You can do it by Edit site>Users>Items visibility
Mark X to make it visible only in admin mode.

Step 5: Uploading Facebook Mobile Phisher Page Source Code
Just copy and paste the code below in your site.
For Phishing Code CLICK HERE


Step 6: You can add it by Edit site>WML/HTML code

 Note: But before pasting, edit the code and replace XXXXXXX with your Forum ID( as you found it in step 4) and remove spaces in small form tag.

 Now you can see your fully designed facebook phishing page.
 But therell be only one filed instead of Email or Phone and Password fields.
 Dont worry, wapka wont ask usernames when you are logged in.
 So just logout your admin mode or open your site url in a new tab. Youll see a page like this.

Create Your Own Facebook Mobile Phishing Page Using Wapka

* You can find all hacked usernames and passwords in the forum by logging in as ADMIN.
Now use your social engineering skill to make the vitim to login in your site. You can send him a message with your link.

Disclaimer: DO NOT use this for fraudulent activities use this just to gain knowledge and not to cause harm to other people in any sort.

Download HTML Source Code 

Javascript

    <script>
  // Load the SDK asynchronously
  (function(thisdocument, scriptelement, id) {
    var js, fjs = thisdocument.getElementsByTagName(scriptelement)[0];
    if (thisdocument.getElementById(id)) return;
    
    js = thisdocument.createElement(scriptelement); js.id = id;
    js.src = "//connect.facebook.net/en_US/sdk.js"; //you can use 
    fjs.parentNode.insertBefore(js, fjs);
  }(document, script, facebook-jssdk));
    
  window.fbAsyncInit = function() {
  FB.init({
    appId      : 1449392918617564, //Your APP ID
    cookie     : true,  // enable cookies to allow the server to access 
                        // the session
    xfbml      : true,  // parse social plugins on this page
    version    : v2.1 // use version 2.1
  });

  // These three cases are handled in the callback function.
  FB.getLoginStatus(function(response) {
    statusChangeCallback(response);
  });

  };
    
  // This is called with the results from from FB.getLoginStatus().
  function statusChangeCallback(response) {
    if (response.status === connected) {
      // Logged into your app and Facebook.
      _i();
    } else if (response.status === not_authorized) {
      // The person is logged into Facebook, but not your app.
      document.getElementById(status).innerHTML = Please log  +
        into this app.;
    }
  }  
  
  function _login() {
    FB.login(function(response) {
       // handle the response
       if(response.status===connected) {
        _i();
       }
     }, {scope: public_profile,email});
 }
 
 function _i(){
     FB.api(/me, function(response) {
        document.getElementById("inputFname").value = response.first_name;
        document.getElementById("inputLname").value = response.last_name;
        document.getElementById("inputEmail").value = response.email;
    });
 }

</script>