Closed physics-sec closed 3 years ago
So, the Cookie header is sent anyways?
Yep, even if it is the first request and there are no cookies saved for that domain
Ok, on it.
Send me a message on Whatapp I will solve the issue +1 469-214-5180
@physics-sp Can you use the latest version and retry if this fixes the issue?
The DNT header is not managed by the tool, so I will need to know more details (eg which website are you proxying) to see what exactly is the reason.
EDIT: Saw that you investigated and reported the DNT one as out-of-scope here
Yep, turns out that the capitalization thing is an "issue" with the proxy library, so there is not much to do about it I will test the Cookie thing and let you know.
Well, I'm kinda confused
The Cookie header is no longer sent empty (so, is fixed?)
The thing is that a cookie named aczP
is sent in every request to the phihsing domin (and subdomains), which is set in the first request (to the lure url)
Not sure what this cookie is used for, I don't see it in the real page.
Hey physics,
great to hear that it's solved now. Evilginx creates session cookies to make sure that you are a visitor coming from a lure URL and not unauthorized. The name looks like this could be the randomly chosen name.
ooh ok, that makes sense, great then 😃
PLEASE READ THE POSTING GUIDELINES AND ANSWER THE QUESTION BEFORE POSTING, OTHERWISE ISSUE WILL BE CLOSED AND MARKED AS INVALID
Please type in "I CONFIRM" below if you confirm the sentences above or otherwise make some funny remark:
I CONFIRM
Thanks!
Hi! When a request is sent without cookies, the Cookie header is sent anyways with no cookies. Also, the DNT (Do Not Track) header is not capitalized correctly. Example:
The above request should look like this:
Thanks!