v9.7.8 - Fishing for Phishing

🔥 Release Highlights 🔥

In our latest release, we are thrilled to announce new addition of 120+ OSINT - Phishing Detection templates, thanks to the contributions of our community member @rxerium. These templates are accessible at Phishing Detection templates.

These templates are specifically added to help OSINT analysts, threat researchers, and security professionals in discovering and studying phishing campaigns therefore, we have added them to the OSINT scan profile here. Users can execute the OSINT scan configuration profile with nuclei -u <host> -config ~/nuclei-templates/config/osint.yml

Please note that these templates are not included in the default run. To use them, users can simply include them in the scan using nuclei -u <host> -tags phishing -itags phishing.

By identifying and analyzing phishing sites, OSINT analysts can discover patterns, monitor the activities of threat actors, and collect data essential for broader security research or investigative journalism. This makes it a valuable addition to the OSINT toolkit.

What's Changed

New Templates Added: 126

• http/cves/2023/CVE-2023-43187.yaml by @0xParth
• http/cves/2023/CVE-2023-5089.yaml by @JPG0mez
• http/vulnerabilities/chanjet-tplus/chanjet-tplus-unauth-passreset.yaml by @0xr2r
• http/exposed-panels/atlassian-bamboo-panel.yaml by @righettod
• http/exposed-panels/cleanweb-panel.yaml by @righettod
• http/exposed-panels/eset-protect-panel.yaml by @charles D.
• http/exposed-panels/graylog-panel.yaml by @righettod
• http/exposed-panels/lockself-panel.yaml by @righettod
• http/exposed-panels/moodle-workplace-panel.yaml by @righettod
• http/exposed-panels/nexus-panel.yaml by @righettod
• http/exposed-panels/pahtool-panel.yaml by @righettod
• http/technologies/hcpanywhere-detect.yaml by @righettod
• http/technologies/admiralcloud-detect.yaml by @righettod
• http/osint/phishing/1password-phish.yaml by @rxerium
• http/osint/phishing/adobe-phish.yaml by @rxerium
• http/osint/phishing/aliexpress-phish.yaml by @rxerium
• http/osint/phishing/amazon-phish.yaml by @rxerium
• http/osint/phishing/amazon-web-services-phish.yaml by @rxerium
• http/osint/phishing/american-express-phish.yaml by @rxerium
• http/osint/phishing/anydesk-phish.yaml by @rxerium
• http/osint/phishing/avast-phish.yaml by @rxerium
• http/osint/phishing/avg-phish.yaml by @rxerium
• http/osint/phishing/bank-of-america-phish.yaml by @rxerium
• http/osint/phishing/battlenet-phish.yaml by @rxerium
• http/osint/phishing/bestbuy-phish.yaml by @rxerium
• http/osint/phishing/bitdefender-phish.yaml by @rxerium
• http/osint/phishing/bitwarden-phish.yaml by @rxerium
• http/osint/phishing/blender-phish.yaml by @rxerium
• http/osint/phishing/booking-phish.yaml by @rxerium
• http/osint/phishing/box-storage-phish.yaml by @rxerium
• http/osint/phishing/brave-phish.yaml by @rxerium
• http/osint/phishing/brighthr-phish.yaml by @rxerium
• http/osint/phishing/ccleaner-phish.yaml by @rxerium
• http/osint/phishing/chase-phish.yaml by @rxerium
• http/osint/phishing/chrome-phish.yaml by @rxerium
• http/osint/phishing/costa-phish.yaml by @rxerium
• http/osint/phishing/dashlane-phish.yaml by @rxerium
• http/osint/phishing/deezer-phish.yaml by @rxerium
• http/osint/phishing/deliveroo-phish.yaml by @rxerium
• http/osint/phishing/digital-ocean-phish.yaml by @rxerium
• http/osint/phishing/discord-phish.yaml by @rxerium
• http/osint/phishing/disneyplus-phish.yaml by @rxerium
• http/osint/phishing/dropbox-phish.yaml by @rxerium
• http/osint/phishing/duckduckgo-phish.yaml by @rxerium
• http/osint/phishing/ebay-phish.yaml by @rxerium
• http/osint/phishing/edge-phish.yaml by @rxerium
• http/osint/phishing/ee-mobile-phish.yaml by @rxerium
• http/osint/phishing/eset-phish.yaml by @rxerium
• http/osint/phishing/evernote-phish.yaml by @rxerium
• http/osint/phishing/facebook-phish.yaml by @rxerium
• http/osint/phishing/figma-phish.yaml by @rxerium
• http/osint/phishing/filezilla-phish.yaml by @rxerium
• http/osint/phishing/firefox-phish.yaml by @rxerium
• http/osint/phishing/gimp-phish.yaml by @rxerium
• http/osint/phishing/github-phish.yaml by @rxerium
• http/osint/phishing/google-phish.yaml by @rxerium
• http/osint/phishing/icloud-phish.yaml by @rxerium
• http/osint/phishing/instagram-phish.yaml by @rxerium
• http/osint/phishing/kaspersky-phish.yaml by @rxerium
• http/osint/phishing/kayak-phish.yaml by @rxerium
• http/osint/phishing/keepass-phish.yaml by @rxerium
• http/osint/phishing/keepersecurity-phish.yaml by @rxerium
• http/osint/phishing/keybase-phish.yaml by @rxerium
• http/osint/phishing/lastpass-phish.yaml by @rxerium
• http/osint/phishing/libre-office-phish.yaml by @rxerium
• http/osint/phishing/linkedin-phish.yaml by @rxerium
• http/osint/phishing/malwarebytes-phish.yaml by @rxerium
• http/osint/phishing/mcafee-phish.yaml by @rxerium
• http/osint/phishing/mega-phish.yaml by @rxerium
• http/osint/phishing/messenger-phish.yaml by @rxerium
• http/osint/phishing/microcenter-phish.yaml by @rxerium
• http/osint/phishing/microsoft-phish.yaml by @rxerium
• http/osint/phishing/microsoft-teams-phish.yaml by @rxerium
• http/osint/phishing/netflix-phish.yaml by @rxerium
• http/osint/phishing/nordpass-phish.yaml by @rxerium
• http/osint/phishing/norton-phish.yaml by @rxerium
• http/osint/phishing/notion-phish.yaml by @rxerium
• http/osint/phishing/o2-mobile-phish.yaml by @rxerium
• http/osint/phishing/openai-phish.yaml by @rxerium
• http/osint/phishing/opera-phish.yaml by @rxerium
• http/osint/phishing/paramountplus-phish.yaml by @rxerium
• http/osint/phishing/paypal-phish.yaml by @rxerium
• http/osint/phishing/pcloud-phish.yaml by @rxerium
• http/osint/phishing/pintrest-phish.yaml by @rxerium
• http/osint/phishing/plusnet-phish.yaml by @rxerium
• http/osint/phishing/proton-phish.yaml by @rxerium
• http/osint/phishing/putty-phish.yaml by @rxerium
• http/osint/phishing/python-phish.yaml by @rxerium
• http/osint/phishing/quora-phish.yaml by @rxerium
• http/osint/phishing/reddit-phish.yaml by @rxerium
• http/osint/phishing/roblox-phish.yaml by @rxerium
• http/osint/phishing/roboform-phish.yaml by @rxerium
• http/osint/phishing/royal-mail-phish.yaml by @rxerium
• http/osint/phishing/samsung-phish.yaml by @rxerium
• http/osint/phishing/signal-phish.yaml by @rxerium
• http/osint/phishing/sky-phish.yaml by @rxerium
• http/osint/phishing/skype-phish.yaml by @rxerium
• http/osint/phishing/skyscanner-phish.yaml by @rxerium
• http/osint/phishing/slack-phish.yaml by @rxerium
• http/osint/phishing/sophos-phish.yaml by @rxerium
• http/osint/phishing/spotify-phish.yaml by @rxerium
• http/osint/phishing/steam-phish.yaml by @rxerium
• http/osint/phishing/sync-storage-phish.yaml by @rxerium
• http/osint/phishing/target-phish.yaml by @rxerium
• http/osint/phishing/teamviewer-phish.yaml by @rxerium
• http/osint/phishing/telegram-phish.yaml by @rxerium
• http/osint/phishing/three-mobile-phish.yaml by @rxerium
• http/osint/phishing/thunderbird-phish.yaml by @rxerium
• http/osint/phishing/ticketmaster-phish.yaml by @rxerium
• http/osint/phishing/tiktok-phish.yaml by @rxerium
• http/osint/phishing/trading212-phish.yaml by @rxerium
• http/osint/phishing/trend-micro-phish.yaml by @rxerium
• http/osint/phishing/trip-phish.yaml by @rxerium
• http/osint/phishing/twitch-phish.yaml by @rxerium
• http/osint/phishing/uber-phish.yaml by @rxerium
• http/osint/phishing/visual-studio-code-phish.yaml by @rxerium
• http/osint/phishing/vlc-player-phish.yaml by @rxerium
• http/osint/phishing/vodafone-phish.yaml by @rxerium
• http/osint/phishing/vultr-phish.yaml by @rxerium
• http/osint/phishing/walmart-phish.yaml by @rxerium
• http/osint/phishing/wetransfer-phish.yaml by @rxerium
• http/osint/phishing/whatsapp-phish.yaml by @rxerium
• http/osint/phishing/wikipedia-phish.yaml by @rxerium
• http/osint/phishing/winscp-phish.yaml by @rxerium
• http/osint/phishing/yahoo-phish.yaml by @rxerium
• http/osint/phishing/zoom-phish.yaml by @rxerium

New Contributors

• @Sandr0x00 made their first contribution in #9297
• @0xParth made their first contribution in #9294

Full Changelog: v9.7.7...v9.7.8