Phishing on Cristian Livadaru's Bloghttps://cristian.livadaru.net/tags/phishing/Recent content in Phishing on Cristian Livadaru's BlogHugoen-usCristian LivadaruFri, 26 Nov 2021 10:10:30 +0000Flooding phishing forms with bash and curlhttps://cristian.livadaru.net/flooding-phishing-with-curl/Fri, 26 Nov 2021 10:10:30 +0000https://cristian.livadaru.net/flooding-phishing-with-curl/<p>In 2018 I wrote a quick post on <a href="__GHOST_URL__/how-to-deal-with-phishing-sites/">how to flood phishing pages</a> with a python script. Unfortunately that doesn&rsquo;t work with python3 anymore and also doesn&rsquo;t handle POST request, me not really being a python dev decided to use bash with two packages instead of coding something in ruby.</p> <h2 id="install-packages">Install packages</h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">apt install pwgen gpw </span></span></code></pre></div><p>That&rsquo;s it for the packages, now you have something to generate usernames and passwords.</p> <h2 id="gather-the-fields">Gather the fields</h2> <p>Looking at the page sources shows two fields being used, a field email and password.</p>How to deal with phishing siteshttps://cristian.livadaru.net/how-to-deal-with-phishing-sites/Wed, 01 Aug 2018 12:16:24 +0000https://cristian.livadaru.net/how-to-deal-with-phishing-sites/I&rsquo;ve been receiving some phishing mails aimed at Zimbra users. I could just delete and ignore them, but where&rsquo;s the fun in that?