Skip to content

Commit

Permalink
Fix Lints
Browse files Browse the repository at this point in the history
  • Loading branch information
not-a-rootkit committed Jul 25, 2024
1 parent 24e866d commit 965608d
Show file tree
Hide file tree
Showing 2 changed files with 27 additions and 26 deletions.
1 change: 1 addition & 0 deletions security/badware/phishing-url-tampering.html
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@
}

function percentEncodeURL() {
// Inject percent-encoded characters into the URL to bypass phishing detection
window.location = "/%73%65%63%75%72%69%74%79/%62%61%64%77%61%72%65/%70%68%69%73%68%69%6e%67%2e%68%74%6d%6c"
}
</script>
Expand Down
52 changes: 26 additions & 26 deletions security/badware/server/routes.js
Original file line number Diff line number Diff line change
@@ -1,59 +1,59 @@
const express = require("express");
const express = require('express');
const router = express.Router();

// Returns a 301 redirect to the main phishing test page
router.get("/", (req, res) => {
res.redirect(
301,
"/security/badware/phishing.html"
);
router.get('/', (req, res) => {
res.redirect(
301,
'/security/badware/phishing.html'
);
});

// Returns a 302 redirect to the main phishing test page
router.get("/302", (req, res) => {
res.redirect(
302,
"/security/badware/phishing.html"
);
router.get('/302', (req, res) => {
res.redirect(
302,
'/security/badware/phishing.html'
);
});

// Returns a 301 redirect to a JS redirector page
router.get("/js", (req, res) => {
router.get('/js', (req, res) => {
res.redirect(
301,
"/security/badware/phishing-js-redirector.html"
)
'/security/badware/phishing-js-redirector.html'
);
});

// Returns a 301 redirect to a JS redirector helper page
router.get("/js2", (req, res) => {
router.get('/js2', (req, res) => {
res.redirect(
301,
"/security/badware/phishing-js-redirector-helper.html"
)
'/security/badware/phishing-js-redirector-helper.html'
);
});

// Returns a redirect to a page that loads an iframe that renders a phishing page
router.get("/iframe", (req, res) => {
router.get('/iframe', (req, res) => {
res.redirect(
301,
"/security/badware/phishing-iframe-loader.html"
)
'/security/badware/phishing-iframe-loader.html'
);
});

// Returns a redirect to a page that loads multiple iframes to attempt to bypass the phishing detection
router.get("/iframe2", (req, res) => {
res.redirect(301, "/security/badware/phishing-legit-iframe-loader.html");
router.get('/iframe2', (req, res) => {
res.redirect(301, '/security/badware/phishing-legit-iframe-loader.html');
});

// Returns a redirect to a page that renders a phishing page using a meta refresh (not flagged in dataset)
router.get("/meta", (req, res) => {
res.redirect(301, "/security/badware/phishing-meta-redirect-clean.html");
router.get('/meta', (req, res) => {
res.redirect(301, '/security/badware/phishing-meta-redirect-clean.html');
});

// Returns a redirect to a page that renders a phishing page using a meta refresh (flagged in dataset)
router.get("/meta2", (req, res) => {
res.redirect(301, "/security/badware/phishing-meta-redirect.html");
router.get('/meta2', (req, res) => {
res.redirect(301, '/security/badware/phishing-meta-redirect.html');
});

module.exports = router;

0 comments on commit 965608d

Please sign in to comment.