search

waelmas / frameless-bitb

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.
BSD 3-Clause "New" or "Revised" License
321 stars 35 forks source link

Google phishlet poc have? #7

Closed Dazmed707 closed 4 months ago

Dazmed707 commented 4 months ago

Have google phishlet for poc ?

have google.yaml ?

waelmas commented 4 months ago

Hey there,

The setup this repo explains and builds on top of is designed for Microsoft Enterprise accounts specifically.

Even with Evilginx alone, as far as I know Google is the most challenging to get a working phishlet for as it adds many security layers to protect against MiTM phishing.

The creator of Evilginx announced that a Pro version of Evilginx will be released which will provide a path for bypassing such protections.

But regardless of the above, I do not intend to release phishlets specifically at the moment. The only reason I included the phishlet for MSF is to be able to provide a working and actionable POC of the technique I introduced, always for educational purposes only.