Using AI to repel 2FA 0-day Google attacks
Here's a fun kid snippet from my AI to the anonymous entry into the hack the planet contest. They attacked Google via a 2FA ,with their AI with this code. Make digital Love not war. Lmao
import re
def analyze_email(email_content):
"""
Analyzes the content of an email to detect signs of a 2FA attack.
Args:
email_content: The raw text content of the email.
Returns:
True if the email is suspicious, False otherwise.
"""
# Check for suspicious keywords and phrases
suspicious_keywords = [
"verify your account",
"security alert",
"unusual activity",
"reset your password",
"two-factor authentication",
"login attempt",
]
for keyword in suspicious_keywords:
if keyword in email_content.lower():
return True
# Check for suspicious URLs
url_pattern = r"(https?://\S+)"
urls = re.findall(url_pattern, email_content)
for url in urls:
if not is_legitimate_url(url):
return True
# Check for suspicious sender address
sender_address = extract_sender_address(email_
if not is_legitimate_sender(sender_
return True
# No suspicious elements found
return False
def is_legitimate_url(url):
"""
Checks if a URL is legitimate based on a set of criteria.
Args:
url: The URL to check.
Returns:
True if the URL is legitimate, False otherwise.
"""
# Implement your URL validation logic here
# This could include checking for known phishing domains,
# URL shortening services, suspicious TLDs, etc.
# For example, you could use a blacklist of known phishing domains:
phishing_domains = ["example-phishing.com", "another-phishing.com"]
if any(domain in url for domain in phishing_domains):
return False
# Add more URL validation checks as needed
return True
def is_legitimate_sender(sender_
"""
Checks if a sender address is legitimate based on a set of criteria.
Args:
sender_address: The sender's email address.
Returns:
True if the sender address is legitimate, False otherwise.
"""
# Implement your sender address validation logic here
# This could include checking for spoofed domains,
# suspicious email formats, etc.
# For example, you could check if the domain matches the expected domain:
expected_domain = "example.com"
if not sender_address.endswith(
return False
# Add more sender address validation checks as needed
return True
def extract_sender_address(email_
"""
Extracts the sender's email address from the email content.
Args:
email_content: The raw text content of the email.
Returns:
The sender's email address.
"""
# Implement your email parsing logic here
# This could involve using regular expressions or email parsing libraries
# to extract the sender's address from the email headers.
# For example, you could use a simple regex to extract the address from the "From" header:
from_header_pattern = r"From:.*<(.*)>"
match = re.search(from_header_pattern, email_content)
if match:
return match.group(1)
return None
# Example usage
email_content = """
Subject: Urgent Security Alert!
Dear User,
We have detected unusual activity on your account. Please click on the following link to verify your account and reset your password:
Thank you,
The Security Team
"""
if analyze_email(email_content):
print("This email is suspicious.")
else:
print("This email appears to be legitimate.")
Show quoted text
Comments
Post a Comment