bigbrodude6119 / flipper-zero-evil-portal

Evil portal app for the flipper zero + WiFi dev board
MIT License
1.33k stars 164 forks source link

multiple portals do not forward inputs to flipper #51

Open rawesomeawesome opened 1 year ago

rawesomeawesome commented 1 year ago

Very fun tool, but looking at the html I can't decipher the difference between working index.html portals (google modern and better google mobile) and ones like matrix.html that drop credentials instead of piping them to the flipper... is there a specific template for forwarding html text box inputs to the flipper zero?

rawesomeawesome commented 1 year ago

Testing everything I can try, moving code around in these lil html files... it seems like the matrix code rain can't run if I add the script lines from spirit airlines to successfully pipe the credentials, but I can't understand what the difference is or why spirit airlines needs scripting when the google pages pipe just fine with empty script regions

rawesomeawesome commented 1 year ago

I don't see how the form.elements piping lines:

const email = form.elements['email'].value; const password = form.elements['password'].value; window.location.href = '/get?email=' + email + '&password=' + password;

Causes the matrix rain code not to run

terminal.innerText = '> '; var message = messages.shift(); typeMessage(message, 0); form.style.display = 'none';

// Start matrix rain var spans = matrix.querySelectorAll('span'); for (let i = 0; i < spans.length; i++) { spans[i].style.animationPlayState = 'running';

Other than that this piping method seems to open a new page with window.location.href... but I fail to see how that is required to make the matrix.html pipe it's inputs either, so I'm quite confused

amouly commented 1 year ago

Very fun tool, but looking at the html I can't decipher the difference between working index.html portals (google modern and better google mobile) and ones like matrix.html that drop credentials instead of piping them to the flipper... is there a specific template for forwarding html text box inputs to the flipper zero?

I don't understand what you are trying to do, can you explain with more details?

rawesomeawesome commented 1 year ago

Very fun tool, but looking at the html I can't decipher the difference between working index.html portals (google modern and better google mobile) and ones like matrix.html that drop credentials instead of piping them to the flipper... is there a specific template for forwarding html text box inputs to the flipper zero?

I don't understand what you are trying to do, can you explain with more details?

Trying to determine what syntax sends the login to the flipper successfully when someone presses submit, as all the html files use different syntax/ordering and only some of them work as intended

The listed function of the Evil Portal is to send anything a user enters in the login page to be logged on the flipper, many of the provided portal index.html pages do not properly send these inputs to the flipper. ie: u: username@webmails or whatever p: password or whatever

the guess a number page is fun, but less fun that the flipper doesn't accumulate anyone's guesses matrix.html also fails to send any user inputs to the flipper, possibly in order to make the code rain animation work? I can't figure out what decides that the form will submit it's contents to the flipper or not, looking at the html of the pages side by side

rawesomeawesome commented 1 year ago

https://github.com/rawesomeawesome/flipper-zero-evil-portal/blob/main/portals/Matrix.html My HTML wizard sister wrote up a solution for the matrix page, however I'm too much of a noob to implement something to get numbers submitting for the prank game page

rawesomeawesome commented 1 year ago

It does require that you wait for the fake hacking to complete before the form is submitted, which is almost a security feature, in that a savvy user could exit their browser or reload the page and the flipper would never get their credentials

nayko79 commented 1 year ago

Ya probé todo pero no logro que aparezca el html al conectarse al AP y lo devuelva al flipper, ya no se que más probar