search

D4Vinci / Cr3dOv3r

Know the dangers of credential reuse attacks.
MIT License
2.02k stars 410 forks source link

503 Response in ispwned.grab_password() #71

Open jjisnow opened 6 years ago

jjisnow commented 6 years ago

ghostproject.fr has cloudflare protections so whenever you test for passwords, it will provide a 503 Response page and report no passwords found

jjisnow commented 6 years ago

People are using cfscrape, but the response has changed and now still no adequate responses - it's simply replying with a web page without the passwords, despite sending a 200 OK response.

On Mon, Oct 22, 2018 at 2:37 AM Sergey Musiyenko notifications@github.com wrote:

ghostproject.fr has cloudflare protections so whenever you test for passwords, it will provide a 503 Response page and report no passwords found

Looks like they've set the "Under attack!" mode. I'm not sure if there is a way to fix this issue and bypass the browser check.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/D4Vinci/Cr3dOv3r/issues/71#issuecomment-431678945, or mute the thread https://github.com/notifications/unsubscribe-auth/AC6fQeiDbVmEmeEqjcw_5TxsJS--uO7eks5unJSvgaJpZM4XaZq1 .

musiyenko commented 6 years ago

@jjisnow Actually I've managed to get it working by using cfscrape, but before that I've experienced the same thing as you - 200 OK and no passwords were printed. UPD: It works from time to time, depending on passing or failing Cloudflare test. I'll try changing User-agent...

D4Vinci commented 5 years ago

yup, it's a problem with the site, they changed their policy. I already talked to them. No hope. Will figure out a solution once I have time to work on the project.