keepassxreboot / keepassxc-browser

KeePassXC Browser Extension
GNU General Public License v3.0
1.78k stars 188 forks source link

https://d-936704a874.awsapps.com/ #2390

Open stdedos opened 4 days ago

stdedos commented 4 days ago

There is a bunch of fields, and keepass correctly detects:

as fields.

However, after clicking "Update Password", I am getting redirected to https://clients.amazonworkspaces.com/?auth_code=1.... - and keepass does not offer saving that password

After "TOFU setting your password", the form is no longer available

Image

So I cannot really much offer anything (and offering the URL would likely compromise myself)

Subissue of https://github.com/keepassxreboot/keepassxc-browser/issues/2386

stdedos commented 4 days ago

If it helps:

<div id="containerFrame">
    <div class="wd-container a-spacing-double-large">
        <div class="a-section">
            <div class="a-box a-color-offset-background">
                <div id="mainFrame" class="a-box-inner a-padding-extra-large" style="">
                <div><div id="LoginForm" style=""><div class="a-row a-spacing-base"><h4 class="GC0XJYFBBMD" id="login_display_header"> <span>Please log in with your </span><span class="GC0XJYFBCMD">WorkSpaces </span><span>credentials</span> </h4></div> <div class="a-row a-spacing-base GC0XJYFBFLD" id="wdc_org_row_div"> <div class="GC0XJYFBOLD"><div class="gwt-Label wd-label">Organization Name</div> <div class="gwt-Label wd-label-status"></div></div> <input type="text" class="gwt-TextBox" id="wdc_organization" autocorrect="off" autocapitalize="off" placeholder="Organization Name"> </div> <div class="a-row a-spacing-base" id="wdc_username_div"> <div class="GC0XJYFBOLD"><div class="gwt-Label wd-label">Username</div> <div class="gwt-Label wd-label-status"></div></div> <div class="a-text-left"> <a class="gwt-Anchor" id="wdc_not_you_link" aria-hidden="true" style="display: none;">(not you?)</a> </div> <input type="username" class="gwt-TextBox" id="wdc_username" autocorrect="off" autocapitalize="off" placeholder="Username"> </div> <div class="a-remember-username a-spacing-base"> <span class="username-checkbox" id="wdc_username_checkbox" aria-hidden="true" style="display: none;"><input type="checkbox" value="on" id="gwt-uid-34" tabindex="0"><label for="gwt-uid-34">Remember username</label></span> </div> <div class="a-row a-spacing-base" id="wdc_password_div"> <div class="GC0XJYFBOLD"><div class="gwt-Label wd-label">Password</div> <div class="gwt-Label wd-label-status"></div></div> <input type="password" class="gwt-PasswordTextBox" id="wdc_password" placeholder="Password"> </div> <div class="a-row a-spacing-base" id="wdc_mfacheckbox_div"> <span class="gwt-CheckBox" id="wdc_mfacheckbox" aria-hidden="true" style="display: none;"><input type="checkbox" value="on" id="gwt-uid-37" tabindex="0"><label for="gwt-uid-37">I have an MFA token.</label></span> </div> <div class="a-row a-spacing-base" id="wdc_mfacode_div"> <div aria-hidden="true" class="GC0XJYFBOLD" style="display: none;"><div class="gwt-Label wd-label">MFA Code</div> <div class="gwt-Label wd-label-status"></div></div> <input type="password" class="gwt-PasswordTextBox" id="wdc_mfa" aria-hidden="true" placeholder="MFA Code" style="display: none;"> </div> <div class="GC0XJYFBFLD"><div class="GC0XJYFBGLD a-padding-vertical-mini a-row a-text-center"> <img class="gwt-Image"> <input type="hidden"> </div> <div class="a-spacing-base a-text-center a-padding-vertical-top-tiny"> <a class="gwt-Anchor">Try a different image</a> </div> <div class="a-row a-spacing-base"> <div class="gwt-Label wd-full-label">Type the characters you see in the image</div> <input type="text" class="gwt-TextBox GC0XJYFBLLD"> <div class="GC0XJYFBNLD GC0XJYFBFLD"><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA0AAAANCAYAAABy6+R8AAAAtUlEQVR42p1SwQnEIBD0d+9r4uoIKEIQv3lZhGI9NpBS0spBCkgee47ZCxK8wCkMw+7OsLuqENUZx/EhpXwppQattQUjRl60jjHmmUU+Y8l4Z+zMiD3qLcOcsWWQc45CCIURc34+jWjNHTYWUEqJ1nUt/M1x3ZdReYelKpK1lqZpKlznoYNeYFme/SzGGEsX8MUE3SD4lva6+GM8YIe+2enGdHRq7XRjOnbqur2ud+r+Ef/+vQ+GUPc74dvITQAAAABJRU5ErkJggg==" width="13" height="13" class="gwt-Image GC0XJYFBJLD"></div> </div></div> <div class="a-section a-spacing-extra-large"> <div class="a-row"> <div><span class="a-button a-button-primary a-span12"> <span class="a-button-inner"> <button type="button" class="a-button-text" id="wdc_login_button">Sign In</button> </span> </span></div> </div> </div> <div class="a-gdpr-text a-spacing-small"></div> <div class="a-divider a-divider-section"> <div class="a-divider-inner"></div> </div> <div class="a-row a-spacing-base"> <div> <a class="gwt-Anchor" id="wdc_forgot_password_link">Forgot Password?</a> <a class="gwt-Anchor GC0XJYFBFLD" id="wdc_resync_mfa_link">Troubleshoot MFA</a> </div> </div></div></div></div>
                <div id="loadingFrame" class="wd-loading a-box-inner a-padding-extra-large" aria-hidden="true" style="display: none;">
                    <div class="a-row a-spacing-base a-text-center">
                        <img src="https://d3pgffbf39h4k4.cloudfront.net/fc5f7b56c62a562ff3d29cc25ab192553625b7b6/css/ajax-loader.gif" width="16" height="16">
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>

i.e. neither the login form is saved (it is detected)

varjolintu commented 3 days ago

This needs to be added to the new https://github.com/keepassxreboot/keepassxc-browser/pull/2383 feature.