moby

"Sometimes when they go fishing, they get a whale and it sinks their boat."

Moby is a credentials poisoning tool which floods phishing forms with fake credentials. When phishing operations collect data, the overwhelming volume of fake credentials makes the collected data worthless.

Use responsibly. Only target confirmed phishing sites.

1. Some version of Ruby.
2. *nix, so that it has access to /usr/share/dict/words.

$ gem install moby.rb

Add to your Gemfile:

gem 'moby.rb'

Then run:

$ bundle install

$ brew tap thoran/tap
$ brew install thoran/tap/moby

$ git clone git@github.com:thoran/moby.git
$ cd moby
$ bundle install
$ rake test

$ moby --url https://phishing.site --form_name form-name --username_field_name login --password_field_name password

This is the same as above, but using alternate switches:

$ moby --url https://phishing.site --f form-name --user_field login --pass_field password

This selects the second form on the page (using zero-based indexing) and the first and second fields:

$ moby --url https://phishing.site --form_number 1 --username_field_number 0 --password_field_number 1

This selects the second form on the page (using zero-based indexing) and the first and second fields:

$ moby --url https://phishing.site --form_number 1 --user_field_number 0 --pass_field_number 1

$ moby --url https://phishing.site

This is equivalent to:

$ moby --url https://phishing.site --form_number 0 --username_field_number 0 --password_field_number 1

$ moby --url https://phishing.site --debug --user_agent 'Mozilla/5.0' --username_hostname mydomain.com --username_is_email_address  --verbose

Note that username_hostname is useful only if username_is_email_address is true.

require 'moby'

moby = Moby.new(
  url: 'https://phishing.site',
  form_name: 'form-name',
  username_field_name: 'login',
  password_field_name: 'password'
)
moby.counter_phish

This selects the second form on the page (using zero-based indexing) and uses the first and second fields therein:

require 'moby'

moby = Moby.new(
  url: 'https://phishing.site',
  form_number: 1,
  username_field_number: 0,
  password_field_number: 1,
)
moby.counter_phish

require 'moby'

moby = Moby.new(
  url: 'https://phishing.site',
)
moby.counter_phish

This is equivalent to:

require 'moby'

moby = Moby.new(
  url: 'https://phishing.site',
  form_number: 0,
  username_field_number: 0,
  password_field_number: 1,
)
moby.counter_phish

require 'moby'

moby = Moby.new(
  url: 'https://phishing.site',
  debug: true,
  user_agent: 'Mozilla/5.0',
  username_hostname: 'mydomain.com', # Only useful if username_is_email_address is true.
  username_is_email_address: true,
  verbose: true
)
moby.counter_phish

Note that there's no equivalent short names for constructor arguments.

1. Fork it: https://github.com/thoran/moby/fork
2. Create your feature branch: git checkout -b my-new-feature
3. Commit your changes: git commit -am 'Add some feature'
4. Push to the branch: git push origin my-new-feature
5. Create a new pull request