Skip to content

kakao login phishing Detection

ID: kakao-login-phish

Severity: info

Author: hahwul

Tags: phishing,kakao,osint

A kakao login phishing website was detected

id: kakao-login-phish
info:
name: kakao login phishing Detection
author: hahwul
severity: info
description: |
A kakao login phishing website was detected
reference:
- https://accounts.kakao.com
- https://www.kakaocorp.com
metadata:
max-request: 1
tags: phishing,kakao,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- '카카오계정'
- '로그인'
- '계정 찾기'
- '비밀번호 찾기'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"accounts.kakao.com")'
# digest: 4a0a004730450220321092a0dc38fc2d940d3a5164d4180149a266c469805858a51c9f16bbb581e8022100a35e726388ba1067a6d6490103308eb7c6460d9e5a8c21845d1a52248485c6d2:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/osint/phishing/kakao-login-phish.yaml"

View on Github