gsuite.yaml

[ghost]

A working google yaml file!

[kgretzky]

Can you contact me via email [email protected] ? I've tested the PR and have several questions.

[Aleksandr3313]

google yaml не работает. Вводит имя нормально, но не открывает страницу для ввода пароля.

[ghost]

@Aleksandr3313 The correct file name is gsuite.yaml - could you retest in a gsuite account login? it should work.

[Aleksandr3313]

gsuite.yaml файла не нашел в phishlets нашел только google.yaml

[Aleksandr3313]

google yaml не работает. Вводит имя нормально, но не открывает страницу для ввода пароля.

[ghost]

@Aleksandr3313 I was trying to explain that the template I suggested here was only tested against G-Suite, not regular gmail.

[Aleksandr3313]

gsuite.yaml проверил все работает хорошо

[athena2001]

only works til it asks for password :(

[ghost]

@athena2001 I encountered a very similar symptom when I had setup the nameservers wrong, please follow the tutorial here and update when it all works :)

[Aleksandr3313]

Это хорошо но хотелось бы и простую почту gmail открывать через evilginx, а так же vk, yandex, telegram, mail, открывать через evilginx и тд... а phishlets к ним так и нет. А ведь это крупные платформы в интернете

[ghost]

Это хорошо но хотелось бы и простую почту gmail открывать через evilginx, а так же vk, yandex, telegram, mail, открывать через evilginx и тд... а phishlets к ним так и нет. А ведь это крупные платформы в интернете

This PR is not related to those sites.

@tomelic Thanks for the phishlet and excellent write up. In my testing, the injected JavaScript doesn't do anything. Is there a concrete reason for it or is it copied over from other google templates? I know the signin/v1 login page has similar code, but not sure if it is required for signin/v2. Also, I found that the search field for password may capture a captcha token (in place of the password) if captcha is present.

[ghost]

@TomAbel Not a real reason, mostly there for backup since I tested with it - but I believe will work without it as well so you can just remove it before approval. As for the search field, have not encountered in my testing so can't tell!

@kgretzky could you approve pull request?

[Aleksandr3313]

Кто ни будь phishlets, сделал чтоб попробовать gmail, vk, mail, telegram, на evilginx?

[Darkingoat]

Hey guys, this template seems to work, why isn't it a being approved????? It's insane!!!

[vysecurity]

Doesn't appear to work any longer.

[ghost]

@vysecurity have you tried against g-suite? (Rather than plain gmail)

Also, did you follow the steps shown here? https://cilynx.com/how-to/evilginx2-vs-2fa-phishing/424/

[vysecurity]

Yep Gsuite, followed all steps. Even only whitelisted my own IP ranges to prevent any bot from reading it.

Maybe you have some new ideas? I wonder what it was detecting previously? It stops after putting in username. That said, I'm using EC2.

[ghost]

This was used by my team multiple times and captured full username pass & session cookies

Umm Any errors on evilginx load? How did you handle the ns config?

[vysecurity]

Actually, for NS config I used a special technique. I'll try the standard config you're using.

OK It works, but with a few bugs. Either way, it works.

[ghost]

@kgretzky approve the pull request? :)

[ankushgoel27]

does this still works? i tried the google.yaml file but it doesnt work for me

[ghost]

does this still works? i tried the google.yaml file but it doesnt work for me

The base phishlet I have 100% works for gsuite accounts. There's a guide on my profile on how to upgrade the base phishlet so it'll work for google accounts as well.