kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.72k stars 1.94k forks source link

Page not found after creating lure #222

Closed schuesslerf closed 5 years ago

schuesslerf commented 5 years ago

Hey,

I just got a new domain to test this out.

I basically have my web server up running (Apache).

This is just for testing purposes of course. Lets call the domain "mydomain.com".

What I tried now is the following commands:

config domain mydomain.com
config ip 123.456.789.123
phishlets hostname twitter mydomain.com
phishlets enable twitter
lures create twitter
lures get-url 0

All succeeded with no error, but when trying to visit the site, the page is not found, the normal base url mydomain.com is working though.

Am I missing something here?

IonizeCbr commented 5 years ago

Yeah the readme for this repo is terrible but one line did help explain a-lot of the other hidden functionalities

Type help or help <command> if you want to see available commands or more detailed information on them.

kgretzky commented 5 years ago

I basically have my web server up running (Apache).

I don't understand this. You don't need Apache and it will also block the port that Evilginx needs to listen on.

Can you check the FAQ if you set up nameservers properly? https://github.com/kgretzky/evilginx2/wiki/FAQ

schuesslerf commented 5 years ago

I just shut down apache, please see my other issue (or link it) now, because I can't get a certificate from LetsEncrypt as it seems.

Nameservers seem to be fine.

schuesslerf commented 5 years ago

Okay, problems solved, it works now, needed to add a few more dns records. You can close both issues.

kgretzky commented 5 years ago

Just a reminder, you can close issues you open yourself.