search

bhdresh / Dejavu

DejaVU - Open Source Deception Framework
https://www.camolabs.io
Other
393 stars 97 forks source link

Alerts not sending #32

Open wizhardhacker1 opened 2 years ago

wizhardhacker1 commented 2 years ago

running V12 I have alerts setup and I have tested SMTP and it will send test message but when active attack is happening no alerts are sent image

bhdresh commented 2 years ago

Checking

nikhilj21 commented 2 years ago

On remote Dejavu machine I have tested with this mail id nikxxx@infoxxxxxxt.com and send the test mail and it is working fine. For alerts Kalpeshbhai has tested the same with his mail id kalxxxx@infoxxxxxxt.com and it is also working fine according to his testing. For this we have used the SMTP authentication for the same

bhdresh commented 2 years ago

@wizhardhacker1 ... Can you share following details to replicate the issue, it seems on my side and for @nikhilj21 its working without any issues,

1) SMTP server with credential based authentication? 2) SMTP on non 25 port? 3) Filter configuration for notification. Is it same as above shared snip?

wizhardhacker1 commented 2 years ago

Port 25 Internal smtp No creds needed

Sent from ProtonMail Mobile

On Thu, Sep 23, 2021 at 12:00 AM, ll0_0ll @.***> wrote:

@.(https://github.com/wizhardhacker1) ... Can you share following detaisl to replicate the issue, it seems on my side and for @.(https://github.com/nikhilj21) its working without any issues,

  • SMTP server with credential based authentication?
  • SMTP on non 25 port?
  • Filter configuration for notification. Is it same as above shared snip?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

nikhilj21 commented 2 years ago

What is the HostName of Server IP to be used? Also which is the From Email you are using?

wizhardhacker1 commented 2 years ago

All internal

Sent from ProtonMail Mobile

On Fri, Sep 24, 2021 at 12:43 AM, nikhilj21 @.***> wrote:

What is the HostName of Server IP to be used? Also which is the From Email you are using?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

wizhardhacker1 commented 2 years ago

Just FYI - The test under SMTP does send test message. so it is not my smtp issue.

image

bhdresh commented 2 years ago

What's your notification filter like? Can you try filter with decoy name?

wizhardhacker1 commented 2 years ago

image

Also added each decoy but, notifications are not saving as well and it still doesn't work

bhdresh commented 2 years ago

Can you share the notification filter snip to be able to recreate on my side?

bhdresh commented 2 years ago

No update. Closing the issue.

wizhardhacker1 commented 2 years ago

Still not working.. sent update awhile back Sent from ProtonMail Mobile

On Mon, Oct 25, 2021 at 12:02 PM, ll0_0ll @.***> wrote:

No update. Closing the issue.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

bhdresh commented 2 years ago

Can you share the notification filter snip to be able to recreate on my side?

wizhardhacker1 commented 2 years ago

I did but, I can do it again

Sent from ProtonMail Mobile

On Mon, Oct 25, 2021 at 11:14 PM, ll0_0ll @.***> wrote:

Can you share the notification filter snip to be able to recreate on my side?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

bhdresh commented 2 years ago

@wizhardhacker1 ... did you give it a shot? Are you still facing same issue? will be happy to help.

Please make sure you are running on v14. Pushed few patches.

wizhardhacker1 commented 2 years ago

Same issues

Sent from ProtonMail for iOS

On Thu, Apr 21, 2022 at 8:09 AM, ll0_0ll @.***> wrote:

@.***(https://github.com/wizhardhacker1) ... did you give it a shot? Are you still facing same issue? will be happy to help.

Please make sure you are running on v14. Pushed few patches.

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: @.***>

bhdresh commented 2 years ago

Can you share the notification filter snip to be able to recreate on my side?

VictorHugoLG commented 2 years ago

I'm having trouble setting up smtp, since it doesn't have the credentials field

bhdresh commented 1 year ago

Which version are you running? You can navigate to deviceSettings.php on Console and configure SMTP with authentication details.