[maleek zain]

Hello Mr, How are you sir?

I’m working around evilginx-framework and I have questions that I haven’t been able to get answer to.

How do i prevent phishlet collusion?
I have 2 phishlets that share the same content but have different landing page:
yaml-1
login:
domain: 365
path: /landing1/
yaml-2
login:
domain: 365
path: /landing2/
After loading these phishlets, somehow one of it managed to work while the other didn’t so I asked, why? After some taught I said what if homoglyph is used?
so I added one to my DNS but still result to Host error

The problem I think I have here is maybe because I’m doing it on single FQDN, so I need some help how to beat around this or it’s entirely impossible to achieve this using one domain.

• This topic was modified 9 months ago by maleek zain.
• This topic was modified 9 months ago by maleek zain.

[Author]

Posts