Closed echelonblue closed 3 years ago
Where does this error come up? In the console or on the O365 website?
The office 365 website. See error
Then this looks like an issue with the phishlet and/or your configuration. Basically you need to make sure that the redirect is rewritten properly. Depending on the context, not rewriting it at the last step can be helpful if you want to forward the user to the real website and already captured all you need.
I did read the readme and are aware about the part
no asking for phishlet fixes
However, this smell like a bug, So I give it a try:An O365 test was done on a domain that used its own ADFS.
this ADFS domain was like:
sts.somedomain.com
. the. relevant sections where changed in the o365 phislet:Example of the lines 13 until 21 are as follows:
The EnginX server was executed and forwards to the ADFS site. creds like account and password are intercepted. However. The following error is the result after the MFA code is submitted:
Looks something goes wrong with redirecthing.
Any solutions?