• 0 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: June 13th, 2023

help-circle



  • If you’re lucky, you can dig around in the directory the phishing page is in, and find the other parts of the phish kit - usually just a php/html page, plus some image and css assets. sometimes it gets uploaded as a zip file which you can download to view the source of the page, which can be useful to see where harvested credentials are sent to. Most of the time they’re emailed off to a burner email, but sometimes they’re saved as a text file or posted to a secondary site.

    I built up quite a large collection of phish kits while working at a CERT in the past, was cool to see how simple they were.