最近在某客户钓鱼演练中写的脚本,由于客户环境不出网,所以通过扫描二维码钓鱼,客户希望将扫描二维码的统计落实到个人,这样就需要每个人收到的二维码都需要包含特定的信息,所以写了这个自动批量生成二维码并发送邮件的脚本,具体思路如下:
1、攻击者利用脚本发送带有不同二维码的邮件
2、受害者访问二维码上的链接,该链接指向nginx服务器,同时携带不同的参数值
3、nginx日志记录相关参数,落实到具体扫码的人,然后通过302转发给之后需要填写的表单
4、受害者在表单填写个人信息
This project forked from bambizombie/qrphish
二维码钓鱼
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.