Making our own phishing page isn't a big deal. Copying source code from website and modifying link just does our job. But what if we want to add phishing page for 2FA in the same code?
Consider the scenario Attacker and Victim are both on same network (router) without any firewall.
Attacker burps victim with a phishing page and forces to login.
When victim login attacker gets the information. He enters that information through his own device.
Now the website asks for 2FA.So attacker makes a 2FA phishing page and sends it to victim.
Victim unaware that 2FA was he received was for another device inputs the code.
Attacker gets 2FA credentials and inputs it in his device. Maybe it can work.
My question is that is it possible to combine code for login page and 2FA page into single code and how. In short when attacker inputs his login details and clicks login he should directly get 2FA page.
I want method