search

ryhanson / phishery

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
MIT License
968 stars 210 forks source link

Detection #7

Open moaeddy opened 6 years ago

moaeddy commented 6 years ago

Got this detection http://viruscheckmate.com/id/5KeHK4sJOYmF

but after editing settings.xml.rels by changing the word "External" to "eXtErNaL" there were to detection but the file was corrupt.

any clue how to work this out?

Bry-fi commented 6 years ago

I suppose we can't use "eXtErNaL" because its case sensitive and is defined as "External". Maybe we could treat it as DDE and obfuscate it.

moaeddy commented 6 years ago

how can this be done? or you gonna implement it in your next update?

PaganGuy commented 5 years ago

change the fixed id as mentioned in another post of this exact same issue.