Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add extra phishing detection test pages #217

Merged
merged 7 commits into from
Jul 30, 2024

Conversation

not-a-rootkit
Copy link
Collaborator

@not-a-rootkit not-a-rootkit commented Jul 25, 2024

Asana Task: https://app.asana.com/0/1204023833050360/1207879877788852/f

Add several new abusive test cases for testing phishing detection:

  1. JS redirector (that redirects to a phishing page) - should not be added to phishing dataset
  2. JS redirector indirect (redirects to the page above) - should be added to phishing dataset
  3. iframe loader (loads phishing page in iframe) - should not be added to phishing dataset
  4. iframe loader (loads legit pages in iframe) - should be added to phishing dataset
  5. 301 redirects to all of the above (via HTTP redirectors) - should not be added to phishing dataset
  6. 301 redirect to the main phishing test page - should not be added to phishing dataset
  7. 302 redirect to the main phishing test page - should be added to phishing dataset
  8. Popups with varying targets to phishing test page - should not be added to phishing dataset
  9. Meta refresh redirector to phishing page - should not be added to phishing dataset
  10. Meta refresh redirector to phishing page - should be added to phishing dataset
  11. URL tampering via encoding / whitespace + path + fragment injection - should not be added to phishing dataset
  12. iFrame top navigator - should not be added to the phishing dataset
  13. Form submission to malicious page - should not be added to phishing dataset
  14. Phishing form handler - should be added to phishing dataset
  15. Service worker phishing loader - should not be added to phishing dataset

@not-a-rootkit not-a-rootkit merged commit 0068165 into main Jul 30, 2024
1 check passed
@not-a-rootkit not-a-rootkit deleted the tespach/extra-phishing-error-pages branch July 30, 2024 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant