search

phish-report / IOK

IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics
https://iok.dev
Open Data Commons Open Database License v1.0
161 stars 37 forks source link

Extract title from both response HTML and DOM #219

Closed bradleyjkemp closed 1 year ago

bradleyjkemp commented 1 year ago

I'm tracking a kit where there's an initial title in the response HTML but a different title set by javascript after the page loads. Currently IOK only matches on the title from the DOM, but we want to get it from the response HTML too.