Modlishka icon indicating copy to clipboard operation
Modlishka copied to clipboard

improve 'control' plugin impersonation

Open samane68 opened this issue 6 years ago • 14 comments

when enter email and click on next btn it's not working!!! help plz

samane68 avatar Jan 23 '19 22:01 samane68

use tls instead of http protocol

bordeux avatar Jan 23 '19 22:01 bordeux

sorry, but next button for what?

drk1wi avatar Jan 23 '19 22:01 drk1wi

@drk1wi im sure he is talking about next button in login form on google auth :) It doesnt work, because there are no javascripts. There are not javascripts because trought https it loading http links what are blocked by browser

Currently i have that issue if i have loadbalancer with https which proxing to your tool by http protocol

That is why i thinking he is talking about auth page

bordeux avatar Jan 23 '19 22:01 bordeux

@bordeux hm, i just checked with -target https://google.com -phishingDomain loopback.modlishka.io -listeningPort 80. and the next button works. maybe it was an issue in the previous releases.

@samane68 use tls, or try to fetch the latest code and compile it.

drk1wi avatar Jan 23 '19 22:01 drk1wi

image

If you want see it on live, write me on priv and i will send you link.

Mostly the issue is when on LB i have Certificate, and LB comunicate with modlishka by http protocol :)

But im sure it can be fixed when communication between modlishka and lb will be also by https /tls

bordeux avatar Jan 23 '19 22:01 bordeux

@bordeux hm, i just checked with -target https://google.com -phishingDomain loopback.modlishka.io -listeningPort 80. and the next button works. maybe it was an issue in the previous releases.

@samane68 use tls, or try to fetch the latest code and compile it.

use it but when login on redirecting to account stops and not get session on the admin panel

samane68 avatar Jan 23 '19 23:01 samane68

image

samane68 avatar Jan 23 '19 23:01 samane68

image this session is confirmed but not open mailbox and not save information

samane68 avatar Jan 23 '19 23:01 samane68

@bordeux @drk1wi

samane68 avatar Jan 23 '19 23:01 samane68

detected a problem

samane68 avatar Jan 24 '19 00:01 samane68

what problem?

drk1wi avatar Jan 26 '19 09:01 drk1wi

@bordeux hm, i just checked with -target https://google.com -phishingDomain loopback.modlishka.io -listeningPort 80. and the next button works. maybe it was an issue in the previous releases.

@samane68 use tls, or try to fetch the latest code and compile it.

It is working with loopback but not with paid domain. After first page (signin) not redirecting to password page.

Naeemkhosa avatar Jan 29 '19 09:01 Naeemkhosa

@drk1wi im sure he is talking about next button in login form on google auth :) It doesnt work, because there are no javascripts. There are not javascripts because trought https it loading http links what are blocked by browser

Currently i have that issue if i have loadbalancer with https which proxing to your tool by http protocol

That is why i thinking he is talking about auth page

@bordeux ur assumption is right. Can u help me to resolve this auth issue.

Naeemkhosa avatar Jan 29 '19 09:01 Naeemkhosa

This is a valid problem it has occurred multiple times for me google login doesn't proceed to the passwords page after entering the username.

OpenSourceGuy77 avatar Feb 25 '19 04:02 OpenSourceGuy77