OWASP / QRLJacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.
GNU General Public License v3.0
1.35k stars 615 forks source link

bug in open firefox #218

Open descontrol123 opened 1 year ago

descontrol123 commented 1 year ago

Captura de pantalla (447) hello, someone was able to solve the problem with the geckodriver in firefox since I did it correctly in kali purple and it does not allow me to execute it, I don't know if it can be seen in the image but it tells me

  1. "using the default user agent"
  2. "couldn't open firefox! check the installation instructions again!" and then I followed the steps as I repeat and the same thing appears to me, if someone could help me please or if the creator could it would be great :) thanks
LucaReggiannini commented 1 year ago

Hello, can you please run the following commands and post the output?

file /usr/local/share/geckodriver
ls -al /usr/local/share/geckodriver
which firefox
firefox --version
hemanthreddiee commented 1 year ago

I also had the same issue.

Just downgrade selenium using $ pip install selenium==4.9.0

Hope this works.

descontrol123 commented 1 year ago

Captura de pantalla (453) hello it appears like this and I have the most recent version of firefox

LucaReggiannini commented 1 year ago

Hello, can you please run the following commands and post the output?

file /usr/local/share/geckodriver
ls -al /usr/local/share/geckodriver
which firefox
firefox --version

Please, try this

descontrol123 commented 1 year ago

Captura de pantalla 2023-07-20 152917 there it is friend

LucaReggiannini commented 1 year ago

Captura de pantalla 2023-07-20 152917 there it is friend

Seems like you downloaded the wrong gecko version: i see "aarch64" (for ARM) processor but probably you need the x64 version for Linux. You may need this https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-linux64.tar.gz

descontrol123 commented 1 year ago

Captura de pantalla 2023-07-21 214827 The same friend, look, I installed what you sent me and I put selenium 4.9.0 in it and I put the command use grabber/whatsapp and nothing appears. What else could it be?

LucaReggiannini commented 1 year ago

It is normal if nothing happens: when you run QRLJacker it will spawn an invisible Selenium (Firefox) instance and starts listening on the local port you set with set port command (for example set port 8080) if you connect to, for example, localhost:8080 with your browser you will see the phishing page correctly. Let me know if the problem is fixed

ZiadGad commented 1 year ago

I also had the same issue.

Just downgrade selenium using $ pip install selenium==4.9.0

Hope this works.

It Works For me

dey-joydeep commented 1 year ago

@LucaReggiannini

Can you please help with this error?

QrlJacker > use grabber/whatsapp

QrlJacker Module(grabber/whatsapp) > set port 3200
[+] port => 3200

QrlJacker Module(grabber/whatsapp) > run
[+] Using the default useragent
 Exception: Message: Process unexpectedly closed with status 1

 Trackback: 
Traceback (most recent call last):
  File "/home/jds/Downloads/QRLJacking/QRLJacker/core/browser.py", line 76, in new_session
    new_headless[module_name]["Controller"] = Firefox(profile, executable_path="/usr/local/share/geckodriver", capabilities=caps)#options=self.opts) # Inserting the browser object
                                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/selenium/webdriver/firefox/webdriver.py", line 201, in __init__
    super().__init__(command_executor=executor, options=options, keep_alive=True)
  File "/usr/local/lib/python3.11/dist-packages/selenium/webdriver/remote/webdriver.py", line 286, in __init__
    self.start_session(capabilities, browser_profile)
  File "/usr/local/lib/python3.11/dist-packages/selenium/webdriver/remote/webdriver.py", line 378, in start_session
    response = self.execute(Command.NEW_SESSION, parameters)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/selenium/webdriver/remote/webdriver.py", line 440, in execute
    self.error_handler.check_response(response)
  File "/usr/local/lib/python3.11/dist-packages/selenium/webdriver/remote/errorhandler.py", line 245, in check_response
    raise exception_class(message, screen, stacktrace)
selenium.common.exceptions.WebDriverException: Message: Process unexpectedly closed with status 1

[!] Couldn't open Firefox! Check the installation instructions again!

QrlJacker Module(grabber/whatsapp) > 
LucaReggiannini commented 1 year ago

@dey-joydeep can you please repeat the following steps made by other users in this thread?

Commands:

Hello, can you please run the following commands and post the output?

file /usr/local/share/geckodriver
ls -al /usr/local/share/geckodriver
which firefox
firefox --version

Please, try this

Run the commands and post the output here

cstrv commented 1 year ago

(.venv) [castrv@castrv phish]$ file /usr/local/share/geckodriver /usr/local/share/geckodriver: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, BuildID[sha1]=204c340e375aa3e0fd8a9fa16ee94460221f8f1e, with debug_info, not stripped (.venv) [castrv@castrv phish]$ ls -al /usr/local/share/geckodriver -rwxr-xr-x. 1 castrv castrv 9710704 апр 3 00:59 /usr/local/share/geckodriver (.venv) [castrv@castrv phish]$ which firefox /usr/bin/firefox (.venv) [castrv@castrv phish]$ firefox --version Mozilla Firefox 116.0.3

hamzasakhicyber commented 1 year ago

I have fixed it, Just used the given command to give root privileges to the firefox.

1) sudo su 2) chown root:root /home/kali/.Xauthority

Raxuis commented 1 year ago

@dey-joydeep can you please repeat the following steps made by other users in this thread?

Commands:

Hello, can you please run the following commands and post the output?

file /usr/local/share/geckodriver
ls -al /usr/local/share/geckodriver
which firefox
firefox --version

Please, try this

Run the commands and post the output here

/usr/local/share/geckodriver: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, BuildID[sha1]=204c340e375aa3e0fd8a9fa16ee94460221f8f1e, with debug_info, not stripped -rwxr-xr-x 1 raphael raphael 9710704 Apr 2 23:59 /usr/local/share/geckodriver
/usr/bin/firefox zsh: exec format error: firefox

dileep-2002 commented 1 year ago

thanks bro it works for my system

LucaReggiannini commented 1 year ago

@Raxuis, @anarhia01 Sorry for the late response. I'm not sure you have the right Geckodriver version. Can you try to repeat the installation process with https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-linux64.tar.gz

Tougharah commented 11 months ago

Qrljacker

Help me fix that Firefox problem please

lunaal48 commented 9 months ago

It is normal if nothing happens: when you run QRLJacker it will spawn an invisible Selenium (Firefox) instance and starts listening on the local port you set with set port command (for example set port 8080) if you connect to, for example, localhost:8080 with your browser you will see the phishing page correctly. Let me know if the problem is fixed

Hello, i am having the same problem. Did all what you guys said. Checked the version, downgraded selenium but the same problem kept occuring. Will you please elaborate on this solution that you provided above?

dileep-2002 commented 7 months ago

Hello, can you please run the following commands and post the output?

file /usr/local/share/geckodriver
ls -al /usr/local/share/geckodriver
which firefox
firefox --version

Screenshot (409)

dileep-2002 commented 7 months ago

Screenshot (410)

again i got this error

dileep-2002 commented 7 months ago

can anyone please slove this and help me

moisha0007 commented 6 months ago

Screenshot 2024-03-13 230038 please help me !!

Git-Utkarsh commented 6 months ago

============================[SOLVED]===================================== Geckodriver Version === > https://github.com/mozilla/geckodriver/releases/download/v0.33.0/geckodriver-v0.33.0-linux64.tar.gz

$ sudo su $ pip3 install selenium==4.9.0
$ chown root:root /home/kali/.Xauthority # Root Permissions to Firefox $ python3 QrlJacker.py # Using python 3.11