search

kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.94k stars 1.97k forks source link

instagram cookies problem ! #119

Closed Phoenix1112 closed 5 years ago

Phoenix1112 commented 5 years ago

hello kuba... i did a new phishlets for instagram. password and usernames are coming...but cookies don't come..

example 1 :

according to my research : cookies that appear before you log in yet = csrftoken,mcd,mid,rur

Cookies seen after login = ds_user_id,sessionid,shbid,shbts,urlgen

now I combine them all in this way :

auth_tokens:

I'm experimenting but no cookies are coming and the page is not redirected..

example 2 :

But when I do it like this, it only catches 1 cookie and redirects the page

auth_tokens:

but 1 cookie does not work to log on...this code only catches 1 cookie = ['.*,regexp'] Why is this happening ? (excuse me i am speaking bad english......i am speaking with google translate)

ekran goruntusu 2018-11-25 18 49 07

Phoenix1112 commented 5 years ago

omg it is worked now :+1:

auth_tokens:

domain: '.instagram.com' keys: ['sessionsid','.*,regexp']

instagram

thank you :)

Lglaplante commented 5 years ago

Mind sharing the phishlets ?

AyoubElya commented 5 years ago

Please ?

Lglaplante commented 5 years ago

You don't need to pay Once you understood where and when to put parameters, they are pretty easy to make

AyoubElya commented 5 years ago

@Lglaplante oh.. So help us please, send a sample 👍 !

princenasario commented 5 years ago

Phishlet Please

bojanrodic commented 5 years ago

I am testing this phishlet and it is not working It just not send anyting, not even credintials i tested from computer PC too, because i saw you wrote that it does not work from mobile.