M5STICKC 2 PLUS bruce 1.11 - SERIOUS ISSUES WITH EVIL PORTAL

[lionlggnd]

Describe the bug: When using evil portal, only DEFAULT html page works. if i use custom page (see attched HTML), it is not displayed on the device. If I open the custom page on the computer, it shows properly. The custom page has no dependencies.

More over, after 1 connection, the evil portal become useless and the captive portal is never shown again, regardless of what device i'm connecting.

Windows is never showing the captive portal. opening 172.0.0.1 in chrome does nothing, sign that there is a problem with WEBUI.

Steps To Reproduce:

1. Open an evil portal with "custom HTML" (attached)
2. Specify SSID (every ssid gives the problem...)
3. Select 172.0.0.1 or 192.168.4.1 (both give problem)
4. Connect with an iOS 26.0 iPhone 15 Pro Max to the wifi.
5. The captive portal is not showing
6. INSTEAD OF 4: Connect with windows PC.
7. The captive portal is not opening or prompted.
8. Try disconnect and reconnect
9. The captive portal is now not opening or prompted, regardless of the device (172.0.0.1/192.168.4.1 are not responding)

Expected behavior: Evil portal prompts the captive portal ALWAYS and TO EVERY DEVICE ARE ATTEMPTING A CONNECTION

Actual behavior: When using evil portal, only DEFAULT html page works. if i use custom page (see attched HTML), it is not displayed on the device. If I open the custom page on the computer, it shows properly. The custom page has no dependencies.

More over, after 1 connection, the evil portal become useless and the captive portal is never shown again, regardless of what device i'm connecting.

Windows is never showing the captive portal. opening 172.0.0.1 in chrome does nothing, sign that there is a problem with WEBUI.

insagram.html

[IncursioHack]

Could you please use Bruce's previous firmware and perform the same test?

https://github.com/pr3y/Bruce/releases/download/1.10.2/Bruce-m5stack-cplus2.bin

[lionlggnd]

Could you please use Bruce's previous firmware and perform the same test?

https://github.com/pr3y/Bruce/releases/download/1.10.2/Bruce-m5stack-cplus2.bin

hi, thanks. i tried. when i first booted it, everything worked fine. i sideloaded the HTML file and everything worked fine. after 30 minutes, i retried. The problem represented. But after i rebooted it, now it worked again. Will keep you updated about the situation. Surely will stop working again.

With firmware 1.1, even a reboot did not solve the problem.

It's very unstable. You have to hope that it works...

[IncursioHack]

Please try backing up and deleting the bruce.conf and pins files. This may be incompatible with the firmware. This deletion should be done on both the SD card and LittleFS using the latest BETA version.

[lionlggnd]

i did not understand. i need to:

• reflash 1.1 beta
• start the board and delete bruce.conf and pins file
• what should i do next?

thanks!

[lionlggnd]

btw with fw 1.0.2 is working fine, so far.

[unreal-cat]

This bug persists in version 1.11.1.

Sometimes it works, but sometimes you need to reboot for it to work.

[unreal-cat]

Hello, you need to go to Config and find Restart.

This update does indeed have a bug where the firmware can't perform a normal attack twice. It simply disconnects clients from the network but doesn't open the clone portal, so after each attack, you need to restart the device via Config.

Your issue is specific to the device itself. If you have an iPhone, if you go to the access point settings, you'll see "Auto Login," which is what allows the clone portal to appear.

Auto Login can also be disabled if you attack the network more than once.