← All tools

DeviceCodePhishing

https://denniskniep.github.io/posts/09-device-code-phishing/

Open Source

Categories

Social Engineering

Description

This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

Keywords

azure device-code entra fido2 phishing security go

Example Usage

docker run -p 8080:8080 ghcr.io/denniskniep/device-code-phishing:v1.1.0