search

kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.26k stars 1.87k forks source link

redirect_url issue #967

Open FATnoisyGIRL opened 8 months ago

FATnoisyGIRL commented 8 months ago

after successful <[08:09:17] [+++] [2] detected authorization URL - tokens intercepted: /> I had this: _[08:09:17] [imp] [2] dynamic redirect to URL: https:///path>_ instead of _https:///path>_. Otherwise I had such string in my phishlet: _redirect_url: https:///path>. Also I tried to use <lures edit redirect_url https:///path>>_. Both cases got phish redirect in browser instead of original

FATnoisyGIRL commented 8 months ago

EG latest version 3.2.0

Cainor commented 6 months ago

I'm facing same issue. Instead of redirecting to the URL I wrote in "lure edit 0 redirect_url https://(TheLegitDomain)/" I get the phishing domain instead.

And just wanted to say, that this is a really impressive tool.

Bevis100 commented 2 months ago

can anyone help with this issue ?