Yahoo "Email not registered!" with valid email address

D4Vinci / Cr3dOv3r

Know the dangers of credential reuse attacks.

MIT License

2.02k stars 410 forks source link

Yahoo "Email not registered!" with valid email address #51

Open alesanco opened 6 years ago

alesanco commented 6 years ago

The tool doesn't recognize a valid Yahoo email address, returning "Email not registered!" even if I put the exact password of a personal account. I tried with two different valid Yahoo accounts and I got same results.

I'm using V0.4.1 on ParrotSec

DocKali commented 6 years ago

Exactly the same problem for me. Tool tested with 2 Yahoo adresses of mine, didn't recognize adresses.

BTW, excellent work you did with this tool @D4Vinci, thanks a lot!

alesanco commented 6 years ago

After a rapid debug in the source code, I think the problem is that Yahoo does a redirection to another endpoint for request password after the submission of the email address here.

This could cause that the HTML cached from MechanicalSoup isn't aligned obviously and the selector 'form[class="pure-form pure-form-stacked"]' (here) doesn't work.

As you can see in the debug console, the form1 selector works, but after the submit the form2 selector returns LinkNotFound, probably for the reason I explained below.

Hope this can help you @D4Vinci! If I'll find time to patch it I'll happy to do it.

D4Vinci commented 6 years ago

Okay, thanks guys, I'm working on it right now.

rizzy01 commented 6 years ago

Great work @D4Vinci!, but i am having the same issue with Yahoo "Email not registered!" with valid email address.

D4Vinci commented 6 years ago

I can't solve it, I don't what's the problem! Every thing is working well but the result is not. Anyway I will try harder again once I have time