Comments (13)
thanks, happy to hear that :-)
this is something that I am working on (also testing different approaches), since capturing a precise state of the cookie jar for the whole domain isn't that easy. At the moment you can rely on cookies that are written to the logfile and I will soon add an option to get a them through the control panel.
from modlishka.
If I'm being rational:
- Phish domain > control panel > copy all cookies from origin in JSON
- Replace cookies for origin application with those on clip board
- Access origin application in context of affected user
However, I may be oversimplifying this @drk1wi. Unsure as what the members that are required for the JSON object to be imported.
I'm going to get cracking at GO as soon as I get all my projects written up so that I can contribute instead of theorizing. Modlishka has helped make my reports longer due to success ;)
from modlishka.
Unsure. Haven't had a chance to peek at the code yet. I suspect it'll be a change to the control panel plugin, assuming it accesses the DB directly.
from modlishka.
Hi,
It would be useful to make a text substitution module on the fly. For example, on a phishing domain, you need to replace the text phrase with your own. Or a series of phrases. For convenience, one could use the file (or in the module body itself) to enter a list of replacements.
"word that needs to be replaced": "new word"
from modlishka.
@ciberx this is already implemented. check out the https://github.com/drk1wi/Modlishka/wiki/How-to-use (rules parameter)
from modlishka.
It would be awesome if there were a button in the control panel to copy all cookies to the clipboard in JSON format to support easy session hijacking via browser extensions like CookieBro.
from modlishka.
@Arch4ngel that's an interesting option, but through the phishing domain or the target one?
from modlishka.
@Arch4ngel you want to import cookies like the evilginx?
from modlishka.
@CyberTheReape yes, quite like EG2.
from modlishka.
İ did try with cookies , i did not do it..
But if you edit cookies like the evilginix , maybe you can import it...
from modlishka.
It would be great if the cookies were on the panel.or download link will appear in the panel and it would be great to download and import the json file
from modlishka.
Definitely doable. I can add a JSON download option for each user (format would be based on the CookieJar struct? - would that be useful?)
At the moment cookies are retrieved from the 'set-cookie' HTTP responses (that's also the reason why it is labeled as 'beta'), but if we want to have a precise snapshot of the browsers cookie jar, we could also update the relevant UUID cookie jar entries based on HTTP requests (in case there's a cookie that was created via a JS).
from modlishka.
I don't know exactly..
because each program's import properties are different.need to specify a program to import cookies before.then you should try to set cookies according to the program you selected.Cookie programs that can work with the .json extension..
from modlishka.
Related Issues (20)
- !!! x509: malformed certificate . Terminating. HOT 7
- error 509 certificate malformed
- "JsRule": "
- how to make links to social networks do not change?
- Invalid IP address & redirect HOT 1
- Is it possible to use a preloaded cookie?
- RPC executor service threw an error! HOT 1
- Mod
- How to use regex with rules replace HOT 1
- All Request Forwarded
- TLS Handshake Error Unknown Certificate
- Idle. Not Working. Everything seems set HOT 8
- Stuck on re-direction
- How to stop the Target URL in the body being replaced with the Phishing URL HOT 1
- control panel
- Error.
- TLS error
- modlishka socks5 ip not working
- getting undefined: core function HOT 4
- http: superfluous response.WriteHeader call from net/http/httputil.(*ReverseProxy).ServeHTTP (reverseproxy.go:504) HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from modlishka.