gmail update: phone number!

[Uriel-SG]

The page in which gmail asks for your phone number in order to send you a code.

It's useful if you are looking for the phone number of the person.

[Alygnt]

Just use Google with OTP....

[Uriel-SG]

I'd like to open this issue again:
You use an OTP in order to try to gain access to an account.
But it's not what I'm talking about. I'm thinking about another type of attack where
the pourpouse, in this case, is to obtain the phone number of the person. So the phishing attack will be 'against' the phone number, not necessarely for accessing his account.
Gmail will only be the easy way to obtain it. How? Taking advantage of the gmail page that asks for your phone number for security reason.
You may use any site to obtain a phone number, but I think that the gmail page is the most realistic: it's going to work very well.

[Alygnt]

I had reopened the issue, I will soon try to understand what you asked and update and close this issue

Just for clarification purpose
You want to gain only OTP or even password?
I will so setup what you asked for and update it 😉

Please give a star to this repo⭐

[Uriel-SG]

I'm gonna give a star 'cause this repo is amazing! 😉

Thanks...

The only purpose is to obtain the phone number of the person, you already have the password.

I'm gonna explain better:

1. The person opens the link;

2. The google login page opens, where the person enters his username and password;

3. A new page opens, where google wants to verify your identity. It asks for the phone number to send the verification code;

So you got the following information:
username, password and _ telephone number.

[Alygnt]

Okay understood. I will start working on it 😉. I will close this issue once I completed developing it....

[Uriel-SG]

Hi! Did you try? Does it work? 😊 I'm writing to give you another nice and useful suggestion: What do you think about giving the possibility to *choose a redirecting page* in Google phishing page to use after the "receiver" clicks "Login" (leaving the real Google Login page as *default* if the user doesn't insert any other link)? I'm gonna explain you better: I send to the receiver an e-mail with a fake *google drive* link for example, telling him something like: "*Hey, look at this picture, it'amazing*" or "*Download this document, it's important*" or something like that. He opens the link and the *fake Google Login* page appears. He logs in, the "hacker" receives his datas, and *the page will redirect to the Real google-drive link *(inserted by the "hacker" as an option in LPhishing/NPhishing) which contains the image or the document...or whatever...that can be *truly downloaded* ('cause it's a public link which doesn't need a real login!)... *So, everything seems perfectly normal*. I've tried it (on myself), modifing the code, and it works pretty well. But it would be so much easier if is the program that asks you the redirecting link. Is it clear? I hope so! Let me know Il mer 26 ott 2022, 12:14 Mr.Alygnt Devil ***@***.***> ha scritto:

…

Okay understood. I will start working on it 😉. I will close this issue once I completed developing it.... — Reply to this email directly, view it on GitHub <#19>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/APU35BZKYTL25HK4IPZK3TLWFFDGLANCNFSM6AAAAAARIJCXNE> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[Alygnt]

Hi Uriel-SG,

I tried your suggestion about a google phone number, GOOD NEWS!!😊 The logic works and it can be coded but takes some time. So, I am planning to release it in the next 1.4 Update. Thanks for your suggestion...👍

Ya actually you might not believe I was thinking about the idea I thought to give it on the 1.3 update but unfortunately, I was not able to because of time🤦‍♂️😢. I have tried that syntax and it works just please give me some time.😉
I will try to give these features in the next 1.4 update... STAY TUNED✌

[Alygnt]

Hey @Uriel-SG ,
As you asked i had setup the custom redirect but not in this tool. I created an another phishing tool which is much better than this > https://GitHub.com/Alygnt/Clifty try this tool it has custom redirect and many features, I have recently updated it too.... Check it out

This tool "LPhisher" will no longer be maintained

[Uriel-SG]

I'll check soon! Awesome! Thank you! Il lun 19 dic 2022, 08:56 Mr.Alygnt Devil ***@***.***> ha scritto:

…

Hey @Uriel-SG <https://github.com/Uriel-SG> , As you asked i had setup the custom redirect but not in this tool. I created an another phishing tool which is much better than this > https://GitHub.com/Alygnt/Clifty try this tool it has custom redirect and many features, I have recently updated it too.... Check it out This tool "LPhisher" will no longer be maintained — Reply to this email directly, view it on GitHub <#19>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/APU35B45GGBLJFKN7E2L6MLWOBEODANCNFSM6AAAAAARIJCXNE> . You are receiving this because you were mentioned.Message ID: ***@***.***>