OWASP / QRLJacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.
GNU General Public License v3.0
1.33k stars 619 forks source link

Firfox #212

Closed dorzie66 closed 1 year ago

dorzie66 commented 1 year ago

After loading Qrljacker and setting ports Firefox fails to load. Any help would be great thanks.

LucaReggiannini commented 1 year ago

Please launch Qrljacker and use verbose and debug commands to increment the verbosity of the output. Write here the full output (from the program start to the error).

Please post the output of uname -a && python3 --version too. If you are using another version of python (for example 3.8) please use uname -a && python3.8 --version.

dorzie66 commented 1 year ago

Hi thanks for the reply,i used the 2 commands but got no out put. the message i get from qrl jacker is "couldnt find firefox path" so i guess its something to do with the geckodriver,i used home brew to load it as i couldnt get it to load any other way and i suppose it has been put where it needed to go,as you can tell im new to this programming as i ahvnt done any for over 45 years!

dorzie66 commented 1 year ago

Traceback (most recent call last): File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/Qrljacker.py", line 59, in main() File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/Qrljacker.py", line 54, in main Cli.start() File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/core/Cli.py", line 114, in start utils.Input_completer(all_keywords+modules ) File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/core/utils.py", line 153, in Input_completer readline.read_history_file(history_file) OSError: [Errno 22] Invalid argument anthonys-MBP-2:QRLJacker Dorz$

this is happening now when i try to load qrl jacker

LucaReggiannini commented 1 year ago

Hi thanks for the reply,i used the 2 commands but got no out put. the message i get from qrl jacker is "couldnt find firefox path" so i guess its something to do with the geckodriver,i used home brew to load it as i couldnt get it to load any other way and i suppose it has been put where it needed to go,as you can tell im new to this programming as i ahvnt done any for over 45 years!

Did you install Firefox on your machine? If you are using Homebrew you can install with: brew install --cask firefox

Then you should add it to your $PATH: ln -s /Applications/Firefox.app/Contents/MacOS/firefox-bin /usr/local/bin/firefox

Traceback (most recent call last): File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/Qrljacker.py", line 59, in main() File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/Qrljacker.py", line 54, in main Cli.start() File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/core/Cli.py", line 114, in start utils.Input_completer(all_keywords+modules ) File "/Users/Dorz/Desktop/QRLJacking/QRLJacker/core/utils.py", line 153, in Input_completer readline.read_history_file(history_file) OSError: [Errno 22] Invalid argument anthonys-MBP-2:QRLJacker Dorz$

this is happening now when i try to load qrl jacker

Did you change anything in the meantime? Was this problem present before? It seems to me an additional problem to that of Firefox

dorzie66 commented 1 year ago

hi, firefox was already on my machine ive loaded the command as you stated but i get the same message Couldn't open Firefox! Check the installation instructions again!

LucaReggiannini commented 1 year ago

Plase, make sure that firefox is actually available in your path variable. For example, this is my configuration:

Screenshot from 2023-05-07 18-27-53

try to launch firefox by just typing firefox --version. Do you get any output?

dorzie66 commented 1 year ago

how do i check? if i type the commans firefox --version i get messgae couldn't load XCOM

dorzie66 commented 1 year ago

i tried to delete firfox from the applications folder and reinstall with the way you suggested but when it unpacked and i tried to move it to the directory it said a version already exsisted! so i'm back to where i started

LucaReggiannini commented 1 year ago

Please make sure to delete the .app file, every simlink created with ln and every other binary related to Firefox in the PATH folders. I think you did not completely uninstalled Firefox; some file is still on your system. If you can't figure out what file still need to be deleted i suggest you to search with:

sudo find / -iname "*firefox*" 2>/dev/null

This will find every filename containing "firefox" (case insensitive) in the entire system from the root directory ("/"). Be carefull when deleting files you found in this way!

dorzie66 commented 1 year ago

ok thanks for your help,i ran the code and it bought up a whole page of stuff. How do i delete firefox completly?

dorzie66 commented 1 year ago

/usr/local/bin/firefox /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/pycache/firefox_binary.cpython-311.pyc /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/pycache/firefox_profile.cpython-311.pyc /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/firefox_profile.py /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/firefox_binary.py /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/pycache/firefox_binary.cpython-311.pyc /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/pycache/firefox_profile.cpython-311.pyc /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/firefox_profile.py /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/firefox_binary.py /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/drivers/firefox.py /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/drivers/pycache/firefox.cpython-311.pyc /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/firefox.py /Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/pycache/firefox.cpython-311.pyc /System/Volumes/Data/usr/local/bin/firefox /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/pycache/firefox_binary.cpython-311.pyc /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/pycache/firefox_profile.cpython-311.pyc /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/firefox_profile.py /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium/webdriver/firefox/firefox_binary.py /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/pycache/firefox_binary.cpython-311.pyc /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/pycache/firefox_profile.cpython-311.pyc /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/firefox_profile.py /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/selenium-4.9.0-py3.11.egg/selenium/webdriver/firefox/firefox_binary.py /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/drivers/firefox.py /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/drivers/pycache/firefox.cpython-311.pyc /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/firefox.py /System/Volumes/Data/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/webdriver_manager/pycache/firefox.cpython-311.pyc /System/Volumes/Data/private/var/folders/bh/nqtxv74s1v161_4r3cp0nvhm0000gq/C/org.mozilla.firefox /System/Volumes/Data/private/var/folders/rj/x8myp6n100g14f_7z717mklh0000gn/C/org.mozilla.firefox /System/Volumes/Data/Users/Dorz/Desktop/selenium/selenium/webdriver/firefox /System/Volumes/Data/Users/Dorz/Desktop/selenium/selenium/webdriver/firefox/firefox_profile.py /System/Volumes/Data/Users/Dorz/Desktop/selenium/selenium/webdriver/firefox/firefox_binary.py /System/Volumes/Data/Users/Dorz/Desktop/selenium/build/lib/selenium/webdriver/firefox /System/Volumes/Data/Users/Dorz/Desktop/selenium/build/lib/selenium/webdriver/firefox/firefox_profile.py /System/Volumes/Data/Users/Dorz/Desktop/selenium/build/lib/selenium/webdriver/firefox/firefox_binary.py /System/Volumes/Data/Users/Dorz/Library/Application Support/Firefox /System/Volumes/Data/Users/Dorz/Library/Application Support/CrashReporter/firefox_4C295BD0-7B6F-5C7B-AE3E-4F6BB89DF93E.plist /System/Volumes/Data/Users/Dorz/Library/Application Support/CrashReporter/firefox_B6A93B78-D5E6-54C6-8C2F-0EB9DA362F12.plist /System/Volumes/Data/Users/Dorz/Library/Application Support/CrashReporter/firefox_FADE34AF-C6F9-52F8-ACAA-A5CCACCA1DC8.plist /System/Volumes/Data/Users/Dorz/Library/Saved Application State/org.mozilla.firefox.savedState /System/Volumes/Data/Users/Dorz/Library/Preferences/org.mozilla.firefox.plist /System/Volumes/Data/Users/Dorz/Library/Caches/Firefox /System/Volumes/Data/Users/Dorz/Library/Caches/Mozilla/updates/private/var/folders/bh/nqtxv74s1v161_4r3cp0nvhm0000gq/T/AppTranslocation/B71FA88B-20DF-454F-917D-B41D180109BA/d/Firefox /System/Volumes/Data/Users/Dorz/Library/Caches/Mozilla/updates/Applications/Firefox /System/Volumes/Data/Users/Dorz/Library/Caches/Homebrew/api-source/Homebrew/homebrew-cask/36808716a8970a0b04412610e67f927d72b70456/Cask/firefox.rb /System/Volumes/Data/Users/Dorz/Library/Caches/Homebrew/api-source/Homebrew/homebrew-cask/ca48015876a78a56a55e57bc8d7300a2548428fe/Cask/firefox.rb /System/Volumes/Data/Users/Dorz/Library/Caches/Homebrew/Cask/firefox--112.0.2.dmg /System/Volumes/Data/Users/Dorz/Library/Caches/Homebrew/downloads/9add8399d2d2924d9aee7054f414f910a4564de907d707c3950aa845ee7f8486--firefox.rb /System/Volumes/Data/Users/Dorz/Library/Caches/Homebrew/downloads/de0fae805bcf60b19b0df2005bc23cbc94a763eca5a48c3a036c264b92ee3181--Firefox 112.0.2.dmg /System/Volumes/Data/Users/Dorz/Library/Caches/Homebrew/downloads/82729c5744a7fc314ec622657c67909ec7e3b7e38393cac9844d1605e21c1e09--firefox.rb /System/Volumes/Data/Users/Dorz/Downloads/Firefox 111.0.1.dmg /System/Volumes/Data/Users/Dorz/Downloads/Firefox 112.0.2.dmg /System/Volumes/Data/Applications/Tor Browser.app/Contents/MacOS/firefox /System/Volumes/Data/Applications/Tor Browser.app/Contents/Resources/firefox.icns /System/Volumes/Data/Applications/Tor Browser.app/Contents/Resources/TorBrowser/Docs/Licenses/Firefox.txt /System/Volumes/Data/Applications/Dropbox.app/Contents/Resources/NativeMessagingHost/firefox /System/Volumes/Data/Applications/zoom.us.app/Contents/Frameworks/curl64.framework/Versions/A/Resources/firefox-db2pem.sh /System/Volumes/Data/Applications/Firefox.app /System/Volumes/Data/Applications/Firefox.app/Contents/MacOS/firefox /System/Volumes/Data/Applications/Firefox.app/Contents/MacOS/firefox-bin /System/Volumes/Data/Applications/Firefox.app/Contents/Resources/firefox.icns /System/Volumes/Data/Applications/Firefox.app/Contents/Resources/firefox-bin.sig /System/Volumes/Data/Applications/Firefox.app/Contents/Resources/firefox.sig /private/var/folders/bh/nqtxv74s1v161_4r3cp0nvhm0000gq/C/org.mozilla.firefox /private/var/folders/rj/x8myp6n100g14f_7z717mklh0000gn/C/org.mozilla.firefox /Users/Dorz/Desktop/selenium/selenium/webdriver/firefox /Users/Dorz/Desktop/selenium/selenium/webdriver/firefox/firefox_profile.py /Users/Dorz/Desktop/selenium/selenium/webdriver/firefox/firefox_binary.py /Users/Dorz/Desktop/selenium/build/lib/selenium/webdriver/firefox /Users/Dorz/Desktop/selenium/build/lib/selenium/webdriver/firefox/firefox_profile.py /Users/Dorz/Desktop/selenium/build/lib/selenium/webdriver/firefox/firefox_binary.py /Users/Dorz/Library/Application Support/Firefox /Users/Dorz/Library/Application Support/CrashReporter/firefox_4C295BD0-7B6F-5C7B-AE3E-4F6BB89DF93E.plist /Users/Dorz/Library/Application Support/CrashReporter/firefox_B6A93B78-D5E6-54C6-8C2F-0EB9DA362F12.plist /Users/Dorz/Library/Application Support/CrashReporter/firefox_FADE34AF-C6F9-52F8-ACAA-A5CCACCA1DC8.plist /Users/Dorz/Library/Saved Application State/org.mozilla.firefox.savedState /Users/Dorz/Library/Preferences/org.mozilla.firefox.plist /Users/Dorz/Library/Caches/Firefox /Users/Dorz/Library/Caches/Mozilla/updates/private/var/folders/bh/nqtxv74s1v161_4r3cp0nvhm0000gq/T/AppTranslocation/B71FA88B-20DF-454F-917D-B41D180109BA/d/Firefox /Users/Dorz/Library/Caches/Mozilla/updates/Applications/Firefox /Users/Dorz/Library/Caches/Homebrew/api-source/Homebrew/homebrew-cask/36808716a8970a0b04412610e67f927d72b70456/Cask/firefox.rb /Users/Dorz/Library/Caches/Homebrew/api-source/Homebrew/homebrew-cask/ca48015876a78a56a55e57bc8d7300a2548428fe/Cask/firefox.rb /Users/Dorz/Library/Caches/Homebrew/Cask/firefox--112.0.2.dmg /Users/Dorz/Library/Caches/Homebrew/downloads/9add8399d2d2924d9aee7054f414f910a4564de907d707c3950aa845ee7f8486--firefox.rb /Users/Dorz/Library/Caches/Homebrew/downloads/de0fae805bcf60b19b0df2005bc23cbc94a763eca5a48c3a036c264b92ee3181--Firefox 112.0.2.dmg /Users/Dorz/Library/Caches/Homebrew/downloads/82729c5744a7fc314ec622657c67909ec7e3b7e38393cac9844d1605e21c1e09--firefox.rb /Users/Dorz/Downloads/Firefox 111.0.1.dmg /Users/Dorz/Downloads/Firefox 112.0.2.dmg /Applications/Tor Browser.app/Contents/MacOS/firefox /Applications/Tor Browser.app/Contents/Resources/firefox.icns /Applications/Tor Browser.app/Contents/Resources/TorBrowser/Docs/Licenses/Firefox.txt /Applications/Dropbox.app/Contents/Resources/NativeMessagingHost/firefox /Applications/zoom.us.app/Contents/Frameworks/curl64.framework/Versions/A/Resources/firefox-db2pem.sh /Applications/Firefox.app /Applications/Firefox.app/Contents/MacOS/firefox /Applications/Firefox.app/Contents/MacOS/firefox-bin /Applications/Firefox.app/Contents/Resources/firefox.icns /Applications/Firefox.app/Contents/Resources/firefox-bin.sig /Applications/Firefox.app/Contents/Resources/firefox.sig anthonys-MBP-2:desktop Dorz$

LucaReggiannini commented 1 year ago

You should probably try brew uninstall --zap firefox (from documentation: https://docs.brew.sh/Manpage#uninstall-remove-rm-options-installed_formulainstalled_cask-), delete /Applications/Firefox.app and /usr/local/bin/firefox

after the uninstall process you should try to start firefox. It shouldn't be possible anymore (you should see errors of various kinds). You should try launching it from Mac dashboard and terminal. Once you've made sure Firefox is completely uninstalled, try installing it again via homebrew by repeating the steps in the previous posts

dorzie66 commented 1 year ago

ok i deleted it using the commands you gave,removed it from the application folder and emptied the trash. did the brew install and the commands to load it into the usr/bin directory where i get a message saying cannot complete as firefox is already installed?? im lost now as i thought i had deleted it all but for some reason bits get left behind,thank you for all your help and if you have any more suggestions...

dorzie66 commented 1 year ago

could it be anything to do with gecko driver?

LucaReggiannini commented 1 year ago

I'm reading the issue again. I see that you actually had two different errors related to Firefox:

first one:

Hi thanks for the reply,i used the 2 commands but got no out put. the message i get from qrl jacker is "couldnt find firefox path" so i guess its something to do with the geckodriver,i used home brew to load it as i couldnt get it to load any other way and i suppose it has been put where it needed to go,as you can tell im new to this programming as i ahvnt done any for over 45 years!

second one:

hi, firefox was already on my machine ive loaded the command as you stated but i get the same message Couldn't open Firefox! Check the installation instructions again!

The first one (Couldn't find Firefox file path!) is caused by the fact that Firefox is not correctly installed or is not in your $PATH variable. The second one (Couldn't open Firefox! Check the installation instructions again!) can be caused by a Geckodriver problem.

If you want to check, those errors are managed in the following lines of code: https://github.com/OWASP/QRLJacking/blob/1b0a4e236cc7376de6067fd0c989198cf90ed040/QRLJacker/core/browser.py#L49 https://github.com/OWASP/QRLJacking/blob/1b0a4e236cc7376de6067fd0c989198cf90ed040/QRLJacker/core/browser.py#L76 https://github.com/OWASP/QRLJacking/blob/1b0a4e236cc7376de6067fd0c989198cf90ed040/QRLJacker/core/module.py#L144 https://github.com/OWASP/QRLJacking/blob/1b0a4e236cc7376de6067fd0c989198cf90ed040/QRLJacker/core/module.py#L146

Before investigating further in this issue, please make sure that your configuration is ok. I can suggest to uninstall Firefox and Geckodriver and retry a clean install of the tool.

Make sure to follow the install instruction: https://github.com/OWASP/QRLJacking/tree/master/QRLJacker#installing-instructions Make sure to download the right Geckodriver version for your architecture from here https://github.com/mozilla/geckodriver/releases If you are on Mac i think you should download one of the following versions: https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-macos-aarch64.tar.gz https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-macos.tar.gz

dorzie66 commented 1 year ago

hi, How do i run the code to check the errors? one of the problems i keep having that when i delete firefox and reinstall it to the usr/bin i keep getting told a copy already exists! and when i do the cask install it downloads but i cant find a way of opening firefox as there is no icon any where,also when i go to delete geckodriver how do i find where it is? so for all the dumb questions

LucaReggiannini commented 1 year ago

No problem, can you post a screenshot of the Firefox error and a screenshot for the output of the homebrew installation process?

Btw if you followed the installation instruction the Geckodriver binary should be located in /usr/local/share

dorz66 commented 1 year ago

ok, this is where im at now,on a new system i have downloaded the latest python,downloaded gecko driver and installed with home brew,downloaded QRLJacker,unpacked but it now won't allow me to pip install the requirements txt!!

dorz66 commented 1 year ago

ok got that bit sorted!

dorz66 commented 1 year ago

so program runs and get the same message about firefox couldn't find firefox path?

dorz66 commented 1 year ago
Screenshot 2023-05-09 at 15 48 20 Screenshot 2023-05-09 at 15 48 29
LucaReggiannini commented 1 year ago

Thanks, can you now run the commands in this previous comment and post a screenshot?

Plase, make sure that firefox is actually available in your path variable. For example, this is my configuration:

Screenshot from 2023-05-07 18-27-53

try to launch firefox by just typing firefox --version. Do you get any output?

dorz66 commented 1 year ago

Hi, i just get command not found: firefox

LucaReggiannini commented 1 year ago

I mean: can you run the commands in the screenshot? (echo $PATH etc...). Plus: in case you get a path from the output of which firefox, please run ls -al INSERT_PATH_HERE

dorz66 commented 1 year ago

HiNo it will not runOn 10 May 2023, at 19:04, LucaReggiannini @.***> wrote: I mean: can you run the commands in the screenshot? (echo $PATH etc...). Plus: in case you get a path from the output of which firefox, please run ls -al INSERT_PATH_HERE

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you commented.Message ID: @.***>

dorzie66 commented 1 year ago

Hi, when i run the command it returns "couldn't run XPCOM"

dorz66 commented 1 year ago

so according to usr/local/bin firefox is in there with geckodriver i could not access it through terminal but went through the hard drive looking at the hidden files

dorz66 commented 1 year ago

/Volumes/crucial/Applications/Firefox.app/Contents/Resources/firefox.sig dorianharwood@dorians-Mac-Pro desktop % cd desktop cd: no such file or directory: desktop dorianharwood@dorians-Mac-Pro desktop % cd QRLJacking/QRLJacker dorianharwood@dorians-Mac-Pro QRLJacker % python3 Qrljacker /Library/Frameworks/Python.framework/Versions/3.11/Resources/Python.app/Contents/MacOS/Python: can't open file '/Users/dorianharwood/Desktop/QRLJacking/QRLJacker/Qrljacker': [Errno 2] No such file or directory dorianharwood@dorians-Mac-Pro QRLJacker % python3 Qrljacker.py

▄▄▄▄▄▄▄ ▄ ▄▄ ▄▄▄▄▄▄▄ █ ▄▄▄ █ ██ ▀▄ █ ▄▄▄ █ █ ███ █ ▄▀ ▀▄ █ ███ █ █▄▄▄▄▄█ █ ▄▀█ █▄▄▄▄▄█ ▄▄ ▄ ▄▄▀██▀▀ ▄▄▄ ▄▄ ▄██ ▀ ▄ █▄▀ ▄ ▄█▀▀ ▄ QrlJacker-Framework By @D4Vinci - V2.1.2 █▀█▄▄█▄ ▀▀▄▀▄▄▀ ▀▀▄ █ Attack vector By Mohamed Abdelbasset Elnouby (@SymbianSyMoh) ▄▄▄▄▄▄▄ █ ▄▀ ▄█▄▄██ Loaded 1 grabber(s), 0 post module(s). █ ▄▄▄ █ ▄▄█▀█▄ ▀ ▄▄ █ ███ █ ▀▀█▀▄ ██ ▀▀█ █▄▄▄▄▄█ █▀ ▄▄▀▀ █▄ ▄

QrlJacker > use grabber/whatsapp

QrlJacker Module(grabber/whatsapp) > options

Name Current value Required Description
port 80 Yes The local port to listen on.
host 0.0.0.0 Yes The local host to listen on.
useragent (default) Yes Make useragent is the (default) one, a (random) generated useragent or a specifed useragent

QrlJacker Module(grabber/whatsapp) > run [+] Using the default useragent [+] Running a thread to keep the QR image [whatsapp] [+] Waiting for sessions on whatsapp [+] Running a thread to detect Idle once it happens then click the QR reload button [whatsapp] [+] Initializing webserver... [whatsapp]

QrlJacker Module(grabber/whatsapp) >

So some how QRLJacker has fired into life but using a default and not loaded Firefox but I'm not getting the error any more, but now my Firefox icon om my Mac does not launch Firefox?

dorz66 commented 1 year ago

lJacker > use grabber/whatsapp

QrlJacker Module(grabber/whatsapp) > options

Name Current value Required Description
port 80 Yes The local port to listen on.
host 0.0.0.0 Yes The local host to listen on.
useragent (default) Yes Make useragent is the (default) one, a (random) generated useragent or a specifed useragent

QrlJacker Module(grabber/whatsapp) > run [+] Using the default useragent [+] Running a thread to keep the QR image [whatsapp] [+] Waiting for sessions on whatsapp [+] Running a thread to detect Idle once it happens then click the QR reload button [whatsapp] [+] Initializing webserver... [whatsapp]

QrlJacker Module(grabber/whatsapp) > default firefox [!] default is not recognized as an internal command ! [+] Maybe you meant : debug, dev, database [+] Type help or ? to learn more..

QrlJacker Module(grabber/whatsapp) > use firefox [!] firefox module not found!

QrlJacker Module(grabber/whatsapp) > useragent firefox [!] useragent is not recognized as an internal command ! [+] Maybe you meant : , use [+] Type help or ? to learn more..

QrlJacker Module(grabber/whatsapp) >

dorzie66 commented 1 year ago

ok now it runs with out an error but does not load firefox and im not sure how to assign the useragent as any input i do does not give a result

LucaReggiannini commented 1 year ago

What do you mean? It's normal if you do not see Firefox: to see if the tool is working you need to connect localhost on the chosen port. For example if you run set port 1234 before run you can open any browser and connect to 127.0.0.1:1234 to see if the Phishing page is showing

dorzie66 commented 1 year ago

Fantastic thank you so much for all your help

LucaReggiannini commented 1 year ago

No problem :)

dorz66 commented 1 year ago

On 13 May 2023, at 00:13, LucaReggiannini @.***> wrote:

Closed #212 https://github.com/OWASP/QRLJacking/issues/212 as completed.

— Reply to this email directly, view it on GitHub https://github.com/OWASP/QRLJacking/issues/212#event-9237279652, or unsubscribe https://github.com/notifications/unsubscribe-auth/A6Q2SS2ZUEXCQXVPHIWNK43XF27ZZANCNFSM6AAAAAAXYDBYG4. You are receiving this because you commented.

Hi when I set up the port and host and hit run this error came up d: Traceback (most recent call last): File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/threading.py", line 1038, in _bootstrap_inner self.run() File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/threading.py", line 975, in run self._target(*self._args, **self._kwargs) File "/Users/dorianharwood/Desktop/QRLJacking/QRLJacker/core/browser.py", line 198, in serve_module webserver.start_serving(host) File "/Users/dorianharwood/Desktop/QRLJacking/QRLJacker/core/module_utils.py", line 33, in start_serving self.httpd = ReusableTCPServer( (host, self.port), MyHandler) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/socketserver.py", line 456, in init self.server_bind() File "/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/socketserver.py", line 472, in server_bind self.socket.bind(self.server_address) socket.gaierror: [Errno 8] nodename nor servname provided, or not known