kgretzky / evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
BSD 3-Clause "New" or "Revised" License
10.23k stars 1.87k forks source link

Problem on Certificate SSL with Let's Encrypt #989

Open kore566 opened 7 months ago

kore566 commented 7 months ago

Hi, everytime I try to get SSL Certificate i get this errore message:

: phishlets enable outlook [17:27:18] [inf] enabled phishlet 'outlook' [17:27:18] [inf] setting up certificates for phishlet 'outlook'... [17:27:18] [war] failed to load certificate files for phishlet 'outlook', domain 'test.services': open /root/.evilginx/crt/test.services/outlook.crt: no such file or directory [17:27:18] [inf] requesting SSL/TLS certificates from LetsEncrypt... [17:27:37] [!!!] acme: Error -> One or more domains had a problem: [account.test.services] acme: error: 400 :: urn:ietf:params:acme:error:connection :: 1.1.1.1 : Fetching http://account.test.services/.well-known/acme-challenge/qPaH-eM0UVVaaHm7q3180P1WQg9ahrnd-gO2zKiUzAQ: Connection refused, url:
[login.test.services] acme: error: 400 :: urn:ietf:params:acme:error:connection :: 1.1.1.1 : Fetching http://login.test.services/.well-known/acme-challenge/xTdPbSwKJfaQfYknV5MdM5nKBFq2rjcCKHMwXBWIJGM: Connection refused, url:
[outlook.test.services] acme: error: 400 :: urn:ietf:params:acme:error:connection :: 1.1.1.1: Fetching ttp://outlook.test.services/.well-1known/acme-challenge/noDiVWy_TNDQJLo2uYGLXPHbFJ3lfYGwnuX1gs5Juag: Connection refused, url:

I've arleady setted DNS on neamcheap panel, but i can't resolve the issue.

Someone can help me?

Thanks

Turecky commented 7 months ago

If I do not miss something, looks like HTTP server for acme is not used at all. File core/http_server.go have HTTP server implementation for acme but do not found it's usage.

I restore implementation in main.go as previous after name server:

hs, _ := core.NewHttpServer()
hs.Start()
Dazmed707 commented 4 months ago

Send me MSG in telegram @stevesec