Adding a phishing detection template for kakao/naver login (#9329)
* Add kakao login phishing detect * Add naver login phishing detectpatch-1
parent
ed1bf957ea
commit
1b39992239
|
@ -0,0 +1,37 @@
|
|||
id: kakao-login-phish
|
||||
|
||||
info:
|
||||
name: kakao login phishing Detection
|
||||
author: hahwul
|
||||
severity: info
|
||||
description: |
|
||||
A kakao login phishing website was detected
|
||||
reference:
|
||||
- https://accounts.kakao.com
|
||||
- https://www.kakaocorp.com
|
||||
tags: phishing,kakao,osint
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}"
|
||||
|
||||
host-redirects: true
|
||||
max-redirects: 2
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- '카카오계정'
|
||||
- '로그인'
|
||||
- '계정 찾기'
|
||||
- '비밀번호 찾기'
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
- type: dsl
|
||||
dsl:
|
||||
- '!contains(host,"accounts.kakao.com")'
|
|
@ -0,0 +1,35 @@
|
|||
id: naver-login-phish
|
||||
|
||||
info:
|
||||
name: naver login phishing Detection
|
||||
author: hahwul
|
||||
severity: info
|
||||
description: |
|
||||
A naver login phishing website was detected
|
||||
reference:
|
||||
- https://nid.naver.com
|
||||
- https://www.navercorp.com
|
||||
tags: phishing,naver,osint
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}"
|
||||
|
||||
host-redirects: true
|
||||
max-redirects: 2
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
words:
|
||||
- '네이버 : 로그인'
|
||||
- '로그인'
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
- type: dsl
|
||||
dsl:
|
||||
- '!contains(host,"nid.naver.com")'
|
Loading…
Reference in New Issue