paypal phishlet instant redirect to about:blank

kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

BSD 3-Clause "New" or "Revised" License

10.26k stars 1.87k forks source link

paypal phishlet instant redirect to about:blank #947

Open Majdahl opened 10 months ago

Majdahl commented 10 months ago

hey i am having some issues with the paypal phishlet. when i load the url after about half a second it redirects me to about:blank does anybody have any solution's for this. i see it has been posted about before but couldnt find any answers.

Oskku commented 10 months ago

There is some injection in client-side lets see what others says

simplerhacking commented 10 months ago

Paypal has been blocking reverse-proxy for a while now. The old phishlet is very outdated, the connection will default you to blank or drop it altogether, so don't waste your time with that.

Use burp or owasp to see correct subdomains & try to reverse engineer it to connect after login + password is submitted. Test with 2fa on & 2fa off on default account using same ip. Could take you days or months to figure out proper phishlet config.