New reverse proxy tool Modlishka

-
You can Bypass Two-Factor Authentication and Automate Phishing Attacks by New Reverse Proxy Tool call Modlishka.
A Polish cybersecurity researcher has released a tool called Modlishka designed for pen testers
The tool will help the pentesters, but may also facilitating the APT Groups in phishing

Modlishka Feature:

  • Phishing tool that bypasses Gmail 2FA
  • Support for majority of 2FA authentication schemes
  • Support for majority of 2FA authentication schemes (by design).
  • No website templates (just point Modlishka to the target domain - in most cases, it will be handled automatically).
  • Full control of "cross" origin TLS traffic flow from your victims browsers (through custom new techniques).
  • Flexible and easily configurable phishing scenarios through configuration options.
  • Pattern based JavaScript payload injection.
  • Striping website from all encryption and security headers (back to 90's MITM style).
  • User credential harvesting (with context based on URL parameter passed identifiers).
  • Can be extended with your ideas through plugins.
  • Stateless design. Can be scaled up easily for an arbitrary number of users - ex. through a DNS load balancer.
  • Web panel with a summary of collected credentials and user session impersonation (beta).
  • Written in Go.

Modlishka Github: https://bit.ly/2RxKEGw
Source: https://ibm.co/2AQRsF2

Comments

Post a Comment

Popular posts from this blog

How to install php7 on centos 6: A Step-by-Step Guide

-
Introduction Learn how to install PHP7 on CentOS 6 using the Remi repository with our detailed step-by-step guide. Includes instructions for setting up PHP7 for Nginx with PHP-FPM and PHP-MySQL. PHP7 brings significant improvements in performance and new features compared to its predecessors. If you're running CentOS 6 and looking to upgrade to PHP7, this guide will help you through the installation process using the Remi repository. We will cover the basic steps and provide additional instructions for setting up PHP7 for Nginx. Prerequisites Before you begin, ensure you have the following: A CentOS 6 server Root access or a user with sudo privileges Step 1: Update the System Start by updating your system to ensure all existing packages are up to date. Copy code yum update -y Step 2: Install Required Packages Install wget and yum-utils to facilitate the installation of the Remi repository. Copy code yum install wget yum-utils -y Step 3: Add the Remi Repository Download and insta
Read more

zimbra some services are not running [Solve problem]

-
How to solved zimbra some services are not running. That after, to installed zimbra mail server. The display a some admin console status red in environment multiple server ( zimbra ldap, zimbra mailbox, zimbra mta etc.). Link to below you maybe likes: How to install and configure zimbra multi server.   How to restrict to user sending mail on zimbra 8.6. How to Restrict Sending to Distribution list in zimbra mail. How to change last login time for all accounts in zimbra ldap. How to zimbra reject authenticated sender login mismatch. Error zimbra some services are not running as bellow Step by step guide the solve problem zimbra some services are not running the following: To restart and enable cron service the permanently. service crond restart chkconfig crond on Opening rsyslog.conf file and uncomment the following. vim /etc/rsyslog.conf Uncomment these two lines $modload imupd $UDPServerRun514   To restart and enable rsyslog service the permanently. servic
Read more

Bash script list all IP addresses connected to Server with Country Information

-
Introduction Learn how to create a Bash script to list all IP addresses connected to your server. This comprehensive guide covers everything from basic to advanced examples, helping you master server monitoring with Bash scripting. This script is designed to list all IP addresses connected to your server, retrieve geographical information for each IP using ipinfo.io , and display the results in a clean format. This guide will walk you through the script, explaining each part in detail, and ensuring you understand how to implement and use it effectively. What is Bash? Bash (Bourne Again Shell) is a Unix shell and command language written by Brian Fox for the GNU Project as a free software replacement for the Bourne shell. It has since become the default login shell for most Linux distributions. Bash can execute commands, read and execute commands from a file, and provide constructs for condition testing, looping, and functions. Prerequisites A Linux-based server with administrative pri
Read more