dunderhay / evilginx3-phishlets

GNU General Public License v3.0
3 stars 1 forks source link

adfs Hook, Line, and Phishlet: Conquering AD FS with Evilginx #2

Open Evil-gray opened 2 months ago

Evil-gray commented 2 months ago

However, the code needs to be modified in the following way:

First, look for a key-value pair in the POST request body. If a match is found, then look for a particular string pattern inside the value of the key-pair. If the search string is found inside the value, replace only the part of the data that matches - otherwise operate as normal and replace the entire key-value pair. Please lay mroe emphasis on this on how to tackle sso.godaddy.com

dunderhay commented 1 month ago

I've never targeted sso.godaddy.com. No idea what values you are looking for / need to replace. Missing a lot of context