Adding a phishing detection template for kakao/naver login (#9329)

* Add kakao login phishing detect

* Add naver login phishing detect
patch-1
HAHWUL 2024-03-16 19:22:22 +09:00 committed by GitHub
parent ed1bf957ea
commit 1b39992239
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 72 additions and 0 deletions

View File

@ -0,0 +1,37 @@
id: kakao-login-phish
info:
name: kakao login phishing Detection
author: hahwul
severity: info
description: |
A kakao login phishing website was detected
reference:
- https://accounts.kakao.com
- https://www.kakaocorp.com
tags: phishing,kakao,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- '카카오계정'
- '로그인'
- '계정 찾기'
- '비밀번호 찾기'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"accounts.kakao.com")'

View File

@ -0,0 +1,35 @@
id: naver-login-phish
info:
name: naver login phishing Detection
author: hahwul
severity: info
description: |
A naver login phishing website was detected
reference:
- https://nid.naver.com
- https://www.navercorp.com
tags: phishing,naver,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- '네이버 : 로그인'
- '로그인'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"nid.naver.com")'