search

gophish / gophish

Open-Source Phishing Toolkit
https://getgophish.com
Other
11.71k stars 2.26k forks source link

IMAP Login failed #2772

Open Aphelion09 opened 1 year ago

Aphelion09 commented 1 year ago

Hello,

since like 2 weeks ago, i've been getting the error, that GoPhish can't login into my Office365 Account with IMAP.

Everything worked perfectly, but out of nowhere the Login doesn't work anymore, nothing was changed at all, thats why its strange.

I tried different IMAP Hosts, but without success. The Credentials are 100% correct.

glennzw commented 1 year ago

If nothing has changed then it's very likely a problem on the O365 side. Single app passwords will sometimes expire.

Can you share a screenshot of the error you're seeing.

anandmainali5 commented 1 year ago

@Aphelion09 you can read here https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online that basic authentication is no longer supported. And we're facing the same issue it doesn't work with office365 anymore not even with app passwords.

Let us know if you found any solution.

Aphelion09 commented 1 year ago

@glennzw
image

Like @anandmainali5 said, it's because of the basic authentication. Tried some things to fix it, but didn't work sadly. Can we expect some future changes concerning to this matter? I will also let you know, when I find a (temporary) fix.

glennzw commented 1 year ago

I'll need to give this some thought; quite annoying that MS is taking away control. Open to suggestions; I suspect building in OAuth is the only way forward.

cyberamar commented 1 year ago

@glennzw, did you manage to give it some thought? As of now, this breaks the full reporting function for anybody on O365.

glennzw commented 1 year ago

I haven't - I'd welcome any suggestions