Hackeronni

Developer and security hacker. 🧙‍♀️🧙‍♂️

Dayjob doing webpentest, phishing and red team stuff
Nightjob developing a open source phishing framework.

[Hackeronni @skansing]

Added Remote Browser Phishing experimental support to Phishing Club. Different from AiTM proxying and VNC/WebRTC streaming like CuddlePhish. The victim interacts with a page you built while a real browser on your server handles the actual login.
Blog: https://t.co/QKFEAmO8aa

[Hackeronni @skansing]

@akaclandestine @akaclandestine This is a malicious fork of https://t.co/VK1qoItGBJ that is weaponized with malware to infect anyone who tries uses it. All links in the readme download a .zip containing a obfuscated lua script and a lua.exe to run it. Please dont endorse malware

[Hackeronni @skansing]

Now you can phish a session in Phishing Club.
Use Session Sushi to get a oauth refresh/access token (and fun stuff).
Then feed the token back into Phishing Club and phish more users via. the compromised account via. Graph API.

[Phishing Club @PhishingClub]

🍣 Check out our latest red team tool https://t.co/FpYc8Np08h

For post session phishing compromise 🎣

Zero dependency browser extension for handling cookies, Microsoft 365 OAuth tokens, and Graph API interactions.

[Hackeronni @skansing]

@Malwarebytes What is new about this?

[Hackeronni @skansing]

Phishing Club v1.20.0 is out. Now you can customize the obfuscation template 🥷 and adjust the UI to if you are using it for blackbox or whitebox phishing. Beyond that it has a handful of bug fixes and various improvements.

https://t.co/fWW2m8c3VO

[Hackeronni @skansing]

@ipurple Thanks for sharing!

[Hackeronni @skansing]

Help 🐟

Phishing Club now support using custom oauth and API requests you define for delivering lures. For example, send the lures using the ms graph API 😅

I need ideas for great applications to try out this features with, for red team lures!

#RedTeaming

[Hackeronni @skansing]

v1.18.0 of https://t.co/fWW2m8bw6g is out. Get it before I release the next update 😃

[Hackeronni @skansing]

I just published a complete guide on using Phishing Club to run a covert red team phishing operation 🥷

From setup to using a hijacked session

https://t.co/OpLL16D9Pg

#RedTeam #InfoSec #OffensiveSecurity #phishing

[Hackeronni @skansing]

But Phishing Club is also for red teamers!

MITM features
- Modify and capture from req and res
- Rewrite url paths and params
- Rewrite with CSS selector
- Allow / Deny using JA4 and CIDR
- Obfuscation
- Custom bot evasion
- Access control
- JA4 Browser impersonation
More!

[Hackeronni @skansing]

Phishing Club 1.7.0 is out! 🎣 https://t.co/fWW2m8bw6g

Features: Multiple domains with TLS, Connect multiple landing pages, MITM proxy, Advanced scheduling, Send via. SMTP or API delivery and much much more!

#phishing #redteam #security #infosec #cybersecurity #phishingclub

[Hackeronni @skansing]

Phishing Club (phishing framework) is now open source and free to use 🎣

https://t.co/Qr6O6NqGP4
or
https://t.co/fWW2m8bw6g

Happy phishing ❤️

[Hackeronni @skansing]

@0xTib3rius 👀

[Hackeronni @skansing]

@_sysengineer Wow, great work 👍I really like it. Is the lights controlled by a webhooks and which simulation software is used?

[Hackeronni @skansing]

@njcve_ Always keep a layer between you and something you are scanning/testing unless you been allow listed in the environment. 😀

[Hackeronni @skansing]

@cyb3rops Fair enough. If you are not the one doing intrusion, penetration tests and such offensive activities, then I would probably call you a blue teamer, grc or something else. I think the terms can help give a 10.000 idea of what people do, but ofc it not black and white at all..

[Hackeronni @skansing]

@trshpuppy 🤘

[Hackeronni @skansing]

@UnaPibaGeek @DailyOsint Absolutely 👍