attacks

type Attack struct {
	Url                 string                                                          // Main Url to visit
	RedirectURL         string                                                          // URL to redirect victim to (for higher impact)
	Actions             []chromedp.Action                                               // Actions of the headless browser
	CustomExtraction    func(string, string) string                                     // Custom action to extract the deep link
	RequestInterception func(ev *fetch.EventRequestPaused) *fetch.ContinueRequestParams // Action to modify request to get deep link
	Path                string                                                          // Path to host attack on
	Fixed               bool                                                            // Attack is fixed
	Type                AttackType                                                      // Type of attack
	CustomBrowserFlags  []chromedp.ExecAllocatorOption                                  // Custom flags to pass to the headless browser
	ExfiltrationSteps   []chromedp.Action                                               // Headless browsers steps to be taken to exfiltrate data (not required)
	ExfilArea           string                                                          // XPath for text to extract out of the page after exfiltration steps
	MimicUserAgent      bool                                                            // If the authentication request should be made mirroring the user agent observed from the victim
}

type AttackResult struct {
	Id           string
	DeepLink     string
	ExfilChannel chan string
}

type AttackType struct {
	Name      string
	Regex     string // Regex matching the desired deep link
	Prefix    string // Deep link prefix needed when rebuilding deep links
	ReturnArg string // Some protocols embed a "return" query parameter, if you want to play with that, set the return arg to the name of that parameter
}

type PasskeyAttack struct {
	Url                string                         // Main Url to visit
	Actions            []chromedp.Action              // Actions of the headless browser
	Path               string                         // Path to host attack on
	CustomBrowserFlags []chromedp.ExecAllocatorOption // Custom flags to pass to the headless browser
	AddDiscoverable    bool                           // Will add the discoverable flag set to true to the FIDO:/ uri
}

type QrProxyAttack struct {
	Url                string                         // Main Url to visit
	Length             int                            // Length of attack in milliseconds
	Sleep              int                            // Milliseconds to wait after reaching target QR code page to start taking screenshots
	Actions            []chromedp.Action              // Actions of the headless browser
	Path               string                         // Path to host attack on
	CustomBrowserFlags []chromedp.ExecAllocatorOption // Custom flags to pass to the headless browser
	QRCodeXPath        string                         // XPATH of the qr-code element
	ExfilArea          string                         // XPath for text to extract out of the page after auth
}