Skip to content

Commit

Permalink
Merge pull request #5 from CodyTolene/google-template
Browse files Browse the repository at this point in the history
v1.4.0
  • Loading branch information
CodyTolene authored Nov 27, 2024
2 parents dfa8a46 + 2118a86 commit ad9e437
Show file tree
Hide file tree
Showing 9 changed files with 351 additions and 48 deletions.
101 changes: 56 additions & 45 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
## Index <a name="index"></a>

- [Examples](#examples)
- [Disclaimer](#disclaimer)
- [Disclaimer & Legal Notice](#disclaimer-legal-notice)
- [Purpose](#purpose)
- [What Are "Evil Portals"?](#what-are-evil-portals)
- [Responsible Use](#responsible-use)
Expand All @@ -25,36 +25,36 @@

## Examples <a name="examples"></a>

| Portal | Preview | Inspired By |
| ----------------- | -------------------------------------------------------------- | ------------------------------------------------------------------------ |
| AT&T | To do... | |
| Alaska Airline | [portals/alaska-airline/index.html][url-portal-alaska-airline] | [@roshanravan][url-roshanravan] - [link][url-roshanravan-alaska-airline] |
| Amazon | [portals/amazon/index.html][url-portal-amazon] | [@roshanravan][url-roshanravan] - [link][url-roshanravan-amazon] |
| Apple | To do... | |
| Delta Airline | To do... | |
| Discord | To do... | |
| Facebook | To do... | |
| Google | To do... | |
| Instagram | To do... | |
| Microsoft | To do... | |
| Microsoft 365 | To do... | |
| Southwest Airline | To do... | |
| Spectrum | To do... | |
| Spirit Airline | To do... | |
| Starbucks | To do... | |
| Starlink | To do... | |
| T-Mobile | To do... | |
| Twitch | To do... | |
| United Airline | To do... | |
| X / Twitter | To do... | |
| Portal | Preview | Inspired By |
| ----------------- | ---------------------------------------------------------------- | ------------------------------------------------------------------------- |
| AT&T | To do... | |
| Alaska Airlines | [portals/alaska-airlines/index.html][url-portal-alaska-airlines] | [@roshanravan][url-roshanravan] - [link][url-roshanravan-alaska-airlines] |
| Amazon | [portals/amazon/index.html][url-portal-amazon] | [@roshanravan][url-roshanravan] - [link][url-roshanravan-amazon] |
| Apple | To do... | |
| Delta Airlines | To do... | |
| Discord | To do... | |
| Facebook | To do... | |
| Google | [portals/google/index.html][url-portal-google] | [@breaching][url-breaching] - [link][url-breaching-google] |
| Instagram | To do... | |
| Microsoft | To do... | |
| Microsoft 365 | To do... | |
| Southwest Airline | To do... | |
| Spectrum | To do... | |
| Spirit Airlines | To do... | |
| Starbucks | To do... | |
| Starlink | To do... | |
| T-Mobile | To do... | |
| Twitch | To do... | |
| United Airlines | To do... | |
| X / Twitter | To do... | |

<p align="right">[ <a href="#index">Index</a> ]</p>

<!---------------------------------------------------------------------------->
<!---------------------------------------------------------------------------->
<!---------------------------------------------------------------------------->

## ⚠️ Disclaimer <a name="disclaimer"></a>
## ⚠️ Disclaimer and Legal Notice <a name="disclaimer-legal-notice"></a>

This repository is provided for **educational purposes only** and is intended
for use by:
Expand All @@ -64,22 +64,27 @@ for use by:
- Penetration testers
- Individuals seeking to understand network vulnerabilities to improve defenses

**Do not use these tools without explicit permission** from the owner of the
network or system being tested. Unauthorized use may violate local, state, or
international laws. The repository maintainers will not be held responsible for
any misuse of the provided code, templates, or examples.
Important Usage Guidelines:

The logos and designs in this repository are **not official logos** and are
provided solely for **educational purposes**. They are artistic representations
or placeholders and do not imply endorsement, affiliation, or sponsorship by the
respective brands.
- Only use these tools with explicit authorization from the owner of the network
or system being tested.
- Unauthorized use may violate local, state, or international laws.
- The repository maintainers are not liable for misuse of the provided code,
templates, or examples.

### Legal Notice
About Logos and Designs:

The content of this repository is provided "as is" without any guarantees or
warranties. By using the tools and templates provided herein, you acknowledge
and accept full responsibility for their use, including ensuring compliance with
applicable laws and obtaining proper authorization.
- The logos and designs in this repository are artistic representations or
placeholders provided solely for educational purposes.
- They do not imply endorsement, affiliation, or sponsorship by the respective
brands.

Terms of Use:

- The content in this repository is provided "as is," with no guarantees or
warranties.
- By using the tools and templates herein, you accept full responsibility for
ensuring compliance with applicable laws and obtaining proper authorization.

<p align="right">[ <a href="#index">Index</a> ]</p>

Expand All @@ -91,8 +96,9 @@ applicable laws and obtaining proper authorization.

The goal of this repository is to raise awareness about the vulnerabilities that
attackers may exploit using "Evil Portals" — captive portals designed to mimic
legitimate login systems on open access points (APs). By providing realistic
examples and explanations of how these systems operate, this repository aims to:
legitimate login systems on open access points (APs) or otherwise. By providing
realistic examples and explanations of how these systems operate, this
repository aims to:

1. **Educate network administrators and developers** about potential risks.
2. **Demonstrate the importance of securing wireless networks** against
Expand Down Expand Up @@ -150,7 +156,7 @@ individuals and organizations aware of potential threats.
1. Clone this repository to your machine.
2. Set up a Raspberry Pi or other [supported hardware][url-lambda-guru] as an
access point.
3. Use the provided templates from within the `\portals` folder to simulate
3. Use the provided templates from within the `/portals` folder to simulate
captive portals in a controlled environment.
4. Review the provided documentation to understand how attackers exploit this
technique — and how to defend against it.
Expand All @@ -171,11 +177,11 @@ the provided examples. To get started with development:
3. Create a new branch for your changes.
4. Ensure node.js and npm are installed on your machine.
5. Run `npm install` to install dependencies.
6. Make your changes to the files in the `src\` folder, and test them locally:
6. Make your changes to the files in the `src/` folder, and test them locally:
- Use `npm run build:watch` to watch for changes and rebuild the project.
- Navigate to "http://localhost:8080/{filename}/index.html" to view changes
(replace `{filename}` with the file you want to view).
7. Once your happy with the changes, you can finalize your changes with
7. Once you're happy with the changes, you can finalize your changes with
`npm run build`.
8. Commit your changes and push them to your fork.
9. Open a pull request to the main repository here.
Expand Down Expand Up @@ -231,15 +237,20 @@ Cody Tolene

<!-- LINK REFERENCES -->

[url-breaching]: https://github.com/breaching
[url-breaching-google]:
https://github.com/bigbrodude6119/flipper-zero-evil-portal/commit/09c66bbb310ea1a1f90b1e00a27b1e90ab5a0d3d#diff-4ef8251f8a9bf3dd2cf37224d237cbaa64ee7607660f28ce37b92e085d217059
[url-btc]:
https://www.blockchain.com/explorer/addresses/btc/bc1qfx3lvspkj0q077u3gnrnxqkqwyvcku2nml86wmudy7yf2u8edmqq0a5vnt
[url-lambda-guru]: https://www.lambda.guru/
[url-new-issue]: https://github.com/CodyTolene/Red-Portals/issues
[url-portal-alaska-airline]:
https://raw.githack.com/CodyTolene/Red-Portals/main/portals/alaska-airline/index.html
[url-portal-alaska-airlines]:
https://raw.githack.com/CodyTolene/Red-Portals/main/portals/alaska-airlines/index.html
[url-portal-amazon]:
https://raw.githack.com/CodyTolene/Red-Portals/main/portals/amazon/index.html
[url-roshanravan-alaska-airline]:
[url-portal-google]:
https://raw.githack.com/CodyTolene/Red-Portals/main/portals/google/index.html
[url-roshanravan-alaska-airlines]:
https://github.com/bigbrodude6119/flipper-zero-evil-portal/commit/26a1b21f79b93290309d310f6ed83ac5ef0b3c82#diff-12c0462156cd8f8052b77b564b003e1d0ab3886b4d42db47ce03381787b30065
[url-roshanravan-amazon]:
https://github.com/bigbrodude6119/flipper-zero-evil-portal/commit/26a1b21f79b93290309d310f6ed83ac5ef0b3c82#diff-454de47dc3f9f980011f78215de6f76df785b08a2299e066b5159fc877722c6d
Expand Down
4 changes: 2 additions & 2 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "red-portals",
"version": "1.2.0",
"version": "1.4.0",
"license": "MIT",
"scripts": {
"build": "npx eleventy",
Expand Down
File renamed without changes.
1 change: 1 addition & 0 deletions portals/google/index.html
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
<!doctype html><html lang="en"><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Google Sign In</title><style>html{width:100%;height:100%}a{color:#a8c7fa;text-decoration:none}body{align-items:center;background-color:#1e1f20;color:#e3e3e3;display:flex;flex-direction:column;font-family:"Google Sans",roboto,"Noto Sans Myanmar UI",arial,sans-serif;font-size:16px;height:100%;justify-content:space-evenly;margin:0;width:100%}body main{align-items:center;background-color:#0e0e0e;border-radius:2rem;display:flex;flex-direction:row;height:400px;justify-content:center;justify-content:space-between;width:80%}body main section{display:flex;flex-direction:column;padding:2rem}body main section:first-child{align-self:baseline}body main section:last-child{align-self:end;flex-basis:50%;flex-grow:1;max-width:50%}body main section h1{font-size:2.25rem;font-weight:400}body main section h1,body main section p,body main section svg{margin:0 0 1rem 0}body main section form{display:flex;flex-direction:column;font-size:.9rem}body main section form .input-container{display:flex;flex-direction:column;margin:1rem 0;position:relative}body main section form .input-container label{background-color:#1e1f20;color:#ccc;font-size:.75rem;left:1rem;padding:0 .25rem;pointer-events:none;position:absolute;top:0;transform:translateY(-50%);transition:all .2s ease}body main section form .input-container input{background-color:rgba(0,0,0,0);border-radius:4px;border:1px solid #ccc;color:#e3e3e3;font-size:1rem;outline:0;padding:1rem;transition:border-color .2s ease,box-shadow .2s ease}body main section form .input-container input:focus{border-color:#a8c7fa;box-shadow:0 0 0 2px rgba(66,133,244,.4)}body main section form .input-container input:focus+label,body main section form .input-container input:not(:placeholder-shown)+label{color:#a8c7fa;font-size:.75rem;top:5px}body main section form .input-container a{color:#a8c7fa;display:block;font-size:.9rem;margin-top:5px;text-decoration:none}body main section form .input-container a:hover{text-decoration:underline}body main section form p{margin-top:1rem}body main section form .actions-container{display:flex;flex-direction:row;justify-content:flex-end;margin-top:2rem}body main section form .actions-container a{padding:1rem}body main section form .actions-container button{background-color:#a8c7fa;border-radius:1.5rem;color:#1e1f20;cursor:pointer;padding:0 1.5rem}body footer{bottom:0;color:#ccc;font-size:.75rem;position:absolute}@media(max-width:768px){body main{border-radius:0;flex-direction:column;height:100%;width:100%}body main section:last-child{max-width:100%}}</style><main><section><svg viewBox="0 0 75 24" width="75" height="24" xmlns="http://www.w3.org/2000/svg" aria-hidden="true"><g><path fill="#ea4335" d="M67.954 16.303c-1.33 0-2.278-.608-2.886-1.804l7.967-3.3-.27-.68c-.495-1.33-2.008-3.79-5.102-3.79-3.068 0-5.622 2.41-5.622 5.96 0 3.34 2.53 5.96 5.92 5.96 2.73 0 4.31-1.67 4.97-2.64l-2.03-1.35c-.673.98-1.6 1.64-2.93 1.64zm-.203-7.27c1.04 0 1.92.52 2.21 1.264l-5.32 2.21c-.06-2.3 1.79-3.474 3.12-3.474z"></path></g><g><path fill="#34a853" d="M58.193.67h2.564v17.44h-2.564z"></path></g><g><path fill="#4285f4" d="M54.152 8.066h-.088c-.588-.697-1.716-1.33-3.136-1.33-2.98 0-5.71 2.614-5.71 5.98 0 3.338 2.73 5.933 5.71 5.933 1.42 0 2.548-.64 3.136-1.36h.088v.86c0 2.28-1.217 3.5-3.183 3.5-1.61 0-2.6-1.15-3-2.12l-2.28.94c.65 1.58 2.39 3.52 5.28 3.52 3.06 0 5.66-1.807 5.66-6.206V7.21h-2.48v.858zm-3.006 8.237c-1.804 0-3.318-1.513-3.318-3.588 0-2.1 1.514-3.635 3.318-3.635 1.784 0 3.183 1.534 3.183 3.635 0 2.075-1.4 3.588-3.19 3.588z"></path></g><g><path fill="#fbbc05" d="M38.17 6.735c-3.28 0-5.953 2.506-5.953 5.96 0 3.432 2.673 5.96 5.954 5.96 3.29 0 5.96-2.528 5.96-5.96 0-3.46-2.67-5.96-5.95-5.96zm0 9.568c-1.798 0-3.348-1.487-3.348-3.61 0-2.14 1.55-3.608 3.35-3.608s3.348 1.467 3.348 3.61c0 2.116-1.55 3.608-3.35 3.608z"></path></g><g><path fill="#ea4335" d="M25.17 6.71c-3.28 0-5.954 2.505-5.954 5.958 0 3.433 2.673 5.96 5.954 5.96 3.282 0 5.955-2.527 5.955-5.96 0-3.453-2.673-5.96-5.955-5.96zm0 9.567c-1.8 0-3.35-1.487-3.35-3.61 0-2.14 1.55-3.608 3.35-3.608s3.35 1.46 3.35 3.6c0 2.12-1.55 3.61-3.35 3.61z"></path></g><g><path fill="#4285f4" d="M14.11 14.182c.722-.723 1.205-1.78 1.387-3.334H9.423V8.373h8.518c.09.452.16 1.07.16 1.664 0 1.903-.52 4.26-2.19 5.934-1.63 1.7-3.71 2.61-6.48 2.61-5.12 0-9.42-4.17-9.42-9.29C0 4.17 4.31 0 9.43 0c2.83 0 4.843 1.108 6.362 2.56L14 4.347c-1.087-1.02-2.56-1.81-4.577-1.81-3.74 0-6.662 3.01-6.662 6.75s2.93 6.75 6.67 6.75c2.43 0 3.81-.972 4.69-1.856z"></path></g></svg><h1>Sign in</h1><p>Use your Google Account</section><section><form action="/login" id="login-form" method="get"><div class="input-container"><label for="username">Email or phone</label> <input id="username" name="username" required type="text"> <a href>Forgot email?</a></div><div class="input-container"><label for="password">Password</label> <input id="password" name="password" required type="password"></div><p>Not your computer? Use Guest mode to sign in privately. <a href>Learn more about using Guest mode</a><div class="actions-container"><a href>Create Account</a> <button aria-label="Login" type="submit" value="Login">Next</button></div></form></section></main><footer><p>This is a simulated template for educational purposes only. Not affiliated with or endorsed by any brand.</footer>
File renamed without changes.
File renamed without changes.
Loading

0 comments on commit ad9e437

Please sign in to comment.