Cristian Livadaru's Blog

My personal view on things

Flooding phishing forms with bash and curl

In 2018 I wrote a quick post on how to flood phishing pages with a python script. Unfortunately that doesn’t work with python3 anymore and also doesn’t handle POST request, me not really being a python dev decided to use bash with two packages instead of coding something in ruby.

Install packages

apt install pwgen gpw

That’s it for the packages, now you have something to generate usernames and passwords.

Gather the fields

Looking at the page sources shows two fields being used, a field email and password.


How to deal with phishing sites

I’ve been receiving some phishing mails aimed at Zimbra users. I could just delete and ignore them, but where’s the fun in that?