MultiValueDictKeyError at /config/httpinjection/

[GoogleCodeExporter]

What steps will reproduce the problem?

subteruge_1.0-1_all.deb is running on a kali last version (05/02/2014)

1. Downloading subterfuge from http://code.google.com/p/subterfuge/ on 
05/02/2014

2. install it with:

       dpkg -i subterfuge_1.0-1_all.deb
       apt-get update
       apt-get install -f

3. Then i start it

        subterfuge 192.168.1.1:80   #kali internal ip

4. on my kali browser at 192.168.1.1:80 I have the subterfuge wall.
   Go to setting, set 192.168.1.254 for gateway (Livebox V2) ;  ARP Poisoning     
   Attack one target 192.168.1.2  (Test machine, windows xp sp2 192.168.1.2)
   Apply

and then START.
All is ok!
i can scan and see a windows with 192.168.1.2 and also the MAC adress.
Then go to http code injection:

     running
     inject-ext-server
     Ifram Injection

     And then there is no place for IP and PORT, just the apply botton; so click on it and then:

    MultiValueDictKeyError at /config/httpinjection/

"Key 'startmsf' not found in <QueryDict: {u'status': [u'no', u'yes'], 
u'custominject': [u''], u'injectip': [u''], u'iexploit': 
[u'inject-ext-server'], u'start-msf': [u'no'], u'injectport': [u''], 
u'payload': [u'frameinjection']}>"

Request Method:     POST
Request URL:    http://192.168.1.15/config/httpinjection/
Django Version:     1.4.5
Exception Type:     MultiValueDictKeyError
Exception Value:    

"Key 'startmsf' not found in <QueryDict: {u'status': [u'no', u'yes'], 
u'custominject': [u''], u'injectip': [u''], u'iexploit': 
[u'inject-ext-server'], u'start-msf': [u'no'], u'injectport': [u''], 
u'payload': [u'frameinjection']}>"

Exception Location: 
    /usr/lib/python2.7/dist-packages/django/utils/datastructures.py in 
__getitem__, line 258
Python Executable:  /usr/bin/python
Python Version:     2.7.3
Python Path:    

['/usr/share/subterfuge',
 '/usr/share/subterfuge',
 '/usr/share',
 '/usr/lib/python2.7',
 '/usr/lib/python2.7/plat-linux2',
 '/usr/lib/python2.7/lib-tk',
 '/usr/lib/python2.7/lib-old',
 '/usr/lib/python2.7/lib-dynload',
 '/usr/local/lib/python2.7/dist-packages',
 '/usr/lib/python2.7/dist-packages',
 '/usr/lib/python2.7/dist-packages/PIL',
 '/usr/lib/python2.7/dist-packages/gtk-2.0',
 '/usr/lib/pymodules/python2.7',
 '/usr/lib/python2.7/dist-packages/wx-2.8-gtk2-unicode',
 '/usr/share/subterfuge/utilities']

   Environment:

Request Method: POST
Request URL: http://192.168.1.15/config/httpinjection/

Django Version: 1.4.5
Python Version: 2.7.3
Installed Applications:
('django.contrib.auth',
 'django.contrib.contenttypes',
 'django.contrib.sessions',
 'django.contrib.sites',
 'django.contrib.messages',
 'django.contrib.staticfiles',
 'subterfuge.main',
 'subterfuge.cease',
 'subterfuge.modules')
Installed Middleware:
('django.middleware.common.CommonMiddleware',
 'django.contrib.sessions.middleware.SessionMiddleware',
 'django.contrib.auth.middleware.AuthenticationMiddleware',
 'django.contrib.messages.middleware.MessageMiddleware')

Traceback:
File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py" in 
get_response
  111.                         response = callback(request, *callback_args, **callback_kwargs)
File "/usr/share/subterfuge/main/views.py" in conf
  396.       httpcodeinjection(request, conf)
File "/usr/share/subterfuge/modules/views.py" in httpcodeinjection
  151.    if request.POST["startmsf"]:
File "/usr/lib/python2.7/dist-packages/django/utils/datastructures.py" in 
__getitem__
  258.             raise MultiValueDictKeyError("Key %r not found in %r" % (key, self))

Exception Type: MultiValueDictKeyError at /config/httpinjection/
Exception Value: "Key 'startmsf' not found in <QueryDict: {u'status': [u'no', 
u'yes'], u'custominject': [u''], u'injectip': [u''], u'iexploit': 
[u'inject-ext-server'], u'start-msf': [u'no'], u'injectport': [u''], 
u'payload': [u'frameinjection']}>"

Request information
GET

No GET data
POST
Variable    Value
status  

u'yes'

custominject    

u''

injectip    

u''

iexploit    

u'inject-ext-server'

start-msf   

u'no'

injectport  

u''

payload     

u'frameinjection'

FILES

No FILES data
COOKIES

No cookie data
META
Variable    Value
wsgi.multiprocess   

False

RUN_MAIN    

'true'

HTTP_REFERER    

'http://192.168.1.15/plugins/'

GNOME_DESKTOP_SESSION_ID    

'this-is-deprecated'

SERVER_PROTOCOL     

'HTTP/1.1'

SERVER_SOFTWARE     

'WSGIServer/0.1 Python/2.7.3'

WINDOWPATH  

'7'

REQUEST_METHOD  

'POST'

LOGNAME     

'root'

USER    

'root'

GNOME_KEYRING_CONTROL   

'/root/.cache/keyring-P1TAfc'

QUERY_STRING    

''

PATH    

'/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'

DISPLAY     

':0.0'

SSH_AGENT_PID   

'2852'

LANG    

'fr_FR.UTF-8'

TERM    

'xterm'

SHELL   

'/bin/bash'

TZ  

'America/Chicago'

XDG_SESSION_COOKIE  

'b4f44dfc8cb357ee0778f8d952ed7c72-1391625358.38748-1756858876'

SERVER_NAME     

'pc6.home'

SESSION_MANAGER     

'local/debian:@/tmp/.ICE-unix/2770,unix/debian:/tmp/.ICE-unix/2770'

SHLVL   

'1'

wsgi.url_scheme     

'http'

WINDOWID    

'16777220'

SERVER_PORT     

'80'

GPG_AGENT_INFO  

'/root/.cache/keyring-P1TAfc/gpg:0:1'

HOME    

'/root'

USERNAME    

'root'

CONTENT_LENGTH  

'119'

CONTENT_TYPE    

'application/x-www-form-urlencoded'

SSH_AUTH_SOCK   

'/root/.cache/keyring-P1TAfc/ssh'

GDMSESSION  

'default'

wsgi.input  

<socket._fileobject object at 0x8fb4eac>

HTTP_USER_AGENT     

'Mozilla/5.0 (X11; Linux i686; rv:22.0) Gecko/20100101 Firefox/22.0 
Iceweasel/22.0'

HTTP_HOST   

'192.168.1.15'

SCRIPT_NAME     

u''

wsgi.multithread    

True

HTTP_CONNECTION     

'keep-alive'

DBUS_SESSION_BUS_ADDRESS    

'unix:abstract=/tmp/dbus-LuZk94I78r,guid=85cd4692a66c520e524801a452f2848e'

_   

'/bin/subterfuge'

XAUTHORITY  

'/var/run/gdm3/auth-for-root-7k8Mto/database'

HTTP_ACCEPT     

'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8'

DESKTOP_SESSION     

'default'

wsgi.file_wrapper   

''

wsgi.version    

(1, 0)

GNOME_KEYRING_PID   

'2752'

GATEWAY_INTERFACE   

'CGI/1.1'

wsgi.run_once   

False

wsgi.errors     

<open file '<stderr>', mode 'w' at 0xb754d0d0>

REMOTE_ADDR     

'192.168.1.15'

HTTP_ACCEPT_LANGUAGE    

'en-US,en;q=0.5'

GDM_LANG    

'fr_FR.UTF-8'

XDG_DATA_DIRS   

'/usr/share/gnome:/usr/local/share/:/usr/share/'

PWD     

'/root'

DJANGO_SETTINGS_MODULE  

'subterfuge.settings'

COLORTERM   

'gnome-terminal'

LS_COLORS   

'rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01
:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.ta
r=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31
:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.
xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:
*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.ace=01
;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gi
f=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:
*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=
01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*
.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01
;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.av
i=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.
yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;3
5:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3
=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.
spx=00;36:*.xspf=00;36:'

REMOTE_HOST     

''

HTTP_ACCEPT_ENCODING    

'gzip, deflate'

PATH_INFO   

u'/config/httpinjection/'

Settings
Using settings module subterfuge.settings
Setting     Value
USE_L10N    

True

USE_THOUSAND_SEPARATOR  

False

CSRF_COOKIE_SECURE  

False

LANGUAGE_CODE   

'en-us'

ROOT_URLCONF    

'subterfuge.urls'

MANAGERS    

()

DEFAULT_CHARSET     

'utf-8'

STATIC_ROOT     

''

ALLOWED_HOSTS   

['*']

MESSAGE_STORAGE     

'django.contrib.messages.storage.fallback.FallbackStorage'

EMAIL_SUBJECT_PREFIX    

'[Django] '

FILE_UPLOAD_PERMISSIONS     

None

URL_VALIDATOR_USER_AGENT    

'Django/1.4.5 (https://www.djangoproject.com)'

STATICFILES_FINDERS     

('django.contrib.staticfiles.finders.FileSystemFinder',
 'django.contrib.staticfiles.finders.AppDirectoriesFinder')

SESSION_COOKIE_DOMAIN   

None

SESSION_COOKIE_NAME     

'sessionid'

ADMIN_FOR   

()

TIME_INPUT_FORMATS  

('%H:%M:%S', '%H:%M')

DATABASES   

{'default': {'ENGINE': 'django.db.backends.sqlite3',
             'HOST': '',
             'NAME': '/usr/share/subterfuge/db',
             'OPTIONS': {},
             'PASSWORD': u'********************',
             'PORT': '',
             'TEST_CHARSET': None,
             'TEST_COLLATION': None,
             'TEST_MIRROR': None,
             'TEST_NAME': None,
             'TIME_ZONE': 'America/Chicago',
             'USER': ''}}

SERVER_EMAIL    

'root@localhost'

FILE_UPLOAD_HANDLERS    

('django.core.files.uploadhandler.MemoryFileUploadHandler',
 'django.core.files.uploadhandler.TemporaryFileUploadHandler')

DEFAULT_CONTENT_TYPE    

'text/html'

APPEND_SLASH    

True

FIRST_DAY_OF_WEEK   

0

DATABASE_ROUTERS    

[]

YEAR_MONTH_FORMAT   

'F Y'

STATICFILES_STORAGE     

'django.contrib.staticfiles.storage.StaticFilesStorage'

CACHES  

{'default': {'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
             'LOCATION': ''}}

SESSION_COOKIE_PATH     

'/'

USE_X_FORWARDED_HOST    

False

MIDDLEWARE_CLASSES  

('django.middleware.common.CommonMiddleware',
 'django.contrib.sessions.middleware.SessionMiddleware',
 'django.contrib.auth.middleware.AuthenticationMiddleware',
 'django.contrib.messages.middleware.MessageMiddleware')

USE_I18N    

True

THOUSAND_SEPARATOR  

','

SECRET_KEY  

u'********************'

LANGUAGE_COOKIE_NAME    

'django_language'

DEFAULT_INDEX_TABLESPACE    

''

TRANSACTIONS_MANAGED    

False

LOGGING_CONFIG  

'django.utils.log.dictConfig'

SEND_BROKEN_LINK_EMAILS     

False

TEMPLATE_LOADERS    

('django.template.loaders.filesystem.Loader',
 'django.template.loaders.app_directories.Loader')

WSGI_APPLICATION    

None

TEMPLATE_DEBUG  

True

X_FRAME_OPTIONS     

'SAMEORIGIN'

AUTHENTICATION_BACKENDS     

('django.contrib.auth.backends.ModelBackend',)

FORCE_SCRIPT_NAME   

None

CACHE_BACKEND   

'locmem://'

SIGNING_BACKEND     

'django.core.signing.TimestampSigner'

SESSION_COOKIE_SECURE   

False

CSRF_COOKIE_DOMAIN  

None

FILE_CHARSET    

'utf-8'

DEBUG   

True

SESSION_FILE_PATH   

None

DEFAULT_FILE_STORAGE    

'django.core.files.storage.FileSystemStorage'

INSTALLED_APPS  

('django.contrib.auth',
 'django.contrib.contenttypes',
 'django.contrib.sessions',
 'django.contrib.sites',
 'django.contrib.messages',
 'django.contrib.staticfiles',
 'subterfuge.main',
 'subterfuge.cease',
 'subterfuge.modules')

LANGUAGES   

(('ar', 'Arabic'),
 ('az', 'Azerbaijani'),
 ('bg', 'Bulgarian'),
 ('bn', 'Bengali'),
 ('bs', 'Bosnian'),
 ('ca', 'Catalan'),
 ('cs', 'Czech'),
 ('cy', 'Welsh'),
 ('da', 'Danish'),
 ('de', 'German'),
 ('el', 'Greek'),
 ('en', 'English'),
 ('en-gb', 'British English'),
 ('eo', 'Esperanto'),
 ('es', 'Spanish'),
 ('es-ar', 'Argentinian Spanish'),
 ('es-mx', 'Mexican Spanish'),
 ('es-ni', 'Nicaraguan Spanish'),
 ('et', 'Estonian'),
 ('eu', 'Basque'),
 ('fa', 'Persian'),
 ('fi', 'Finnish'),
 ('fr', 'French'),
 ('fy-nl', 'Frisian'),
 ('ga', 'Irish'),
 ('gl', 'Galician'),
 ('he', 'Hebrew'),
 ('hi', 'Hindi'),
 ('hr', 'Croatian'),
 ('hu', 'Hungarian'),
 ('id', 'Indonesian'),
 ('is', 'Icelandic'),
 ('it', 'Italian'),
 ('ja', 'Japanese'),
 ('ka', 'Georgian'),
 ('kk', 'Kazakh'),
 ('km', 'Khmer'),
 ('kn', 'Kannada'),
 ('ko', 'Korean'),
 ('lt', 'Lithuanian'),
 ('lv', 'Latvian'),
 ('mk', 'Macedonian'),
 ('ml', 'Malayalam'),
 ('mn', 'Mongolian'),
 ('nb', 'Norwegian Bokmal'),
 ('ne', 'Nepali'),
 ('nl', 'Dutch'),
 ('nn', 'Norwegian Nynorsk'),
 ('pa', 'Punjabi'),
 ('pl', 'Polish'),
 ('pt', 'Portuguese'),
 ('pt-br', 'Brazilian Portuguese'),
 ('ro', 'Romanian'),
 ('ru', 'Russian'),
 ('sk', 'Slovak'),
 ('sl', 'Slovenian'),
 ('sq', 'Albanian'),
 ('sr', 'Serbian'),
 ('sr-latn', 'Serbian Latin'),
 ('sv', 'Swedish'),
 ('sw', 'Swahili'),
 ('ta', 'Tamil'),
 ('te', 'Telugu'),
 ('th', 'Thai'),
 ('tr', 'Turkish'),
 ('tt', 'Tatar'),
 ('uk', 'Ukrainian'),
 ('ur', 'Urdu'),
 ('vi', 'Vietnamese'),
 ('zh-cn', 'Simplified Chinese'),
 ('zh-tw', 'Traditional Chinese'))

COMMENTS_ALLOW_PROFANITIES  

False

STATICFILES_DIRS    

('/usr/share/subterfuge/templates',)

PREPEND_WWW     

False

SECURE_PROXY_SSL_HEADER     

None

SESSION_COOKIE_HTTPONLY     

True

DEBUG_PROPAGATE_EXCEPTIONS  

False

MONTH_DAY_FORMAT    

'F j'

LOGIN_URL   

'/accounts/login/'

SESSION_EXPIRE_AT_BROWSER_CLOSE     

False

TIME_FORMAT     

'P'

DATE_INPUT_FORMATS  

('%Y-%m-%d',
 '%m/%d/%Y',
 '%m/%d/%y',
 '%b %d %Y',
 '%b %d, %Y',
 '%d %b %Y',
 '%d %b, %Y',
 '%B %d %Y',
 '%B %d, %Y',
 '%d %B %Y',
 '%d %B, %Y')

CSRF_COOKIE_NAME    

'csrftoken'

EMAIL_HOST_PASSWORD     

u'********************'

PASSWORD_RESET_TIMEOUT_DAYS     

u'********************'

CACHE_MIDDLEWARE_ALIAS  

'default'

SESSION_SAVE_EVERY_REQUEST  

False

ADMIN_MEDIA_PREFIX  

'/static/admin/'

NUMBER_GROUPING     

0

SESSION_ENGINE  

'django.contrib.sessions.backends.db'

CSRF_FAILURE_VIEW   

'django.views.csrf.csrf_failure'

CSRF_COOKIE_PATH    

'/'

LOGIN_REDIRECT_URL  

'/accounts/profile/'

LOGGING     

{'disable_existing_loggers': False,
 'filters': {'require_debug_false': {'()': 'django.utils.log.RequireDebugFalse'}},
 'handlers': {'mail_admins': {'class': 'django.utils.log.AdminEmailHandler',
                              'filters': ['require_debug_false'],
                              'level': 'ERROR'}},
 'loggers': {'django.request': {'handlers': ['mail_admins'],
                                'level': 'ERROR',
                                'propagate': True}},
 'version': 1}

IGNORABLE_404_URLS  

()

LOCALE_PATHS    

()

TEMPLATE_STRING_IF_INVALID  

''

LOGOUT_URL  

'/accounts/logout/'

EMAIL_USE_TLS   

False

FIXTURE_DIRS    

()

EMAIL_HOST  

'localhost'

DATE_FORMAT     

'N j, Y'

MEDIA_ROOT  

'/usr/share/subterfuge/main'

DEFAULT_EXCEPTION_REPORTER_FILTER   

'django.views.debug.SafeExceptionReporterFilter'

ADMINS  

()

FORMAT_MODULE_PATH  

None

DEFAULT_FROM_EMAIL  

'webmaster@localhost'

MEDIA_URL   

'/main/'

DATETIME_FORMAT     

'N j, Y, P'

TEMPLATE_DIRS   

('/usr/share/subterfuge/templates',)

SITE_ID     

1

DISALLOWED_USER_AGENTS  

()

ALLOWED_INCLUDE_ROOTS   

()

DECIMAL_SEPARATOR   

'.'

SHORT_DATE_FORMAT   

'm/d/Y'

TEST_RUNNER     

'django.test.simple.DjangoTestSuiteRunner'

CACHE_MIDDLEWARE_KEY_PREFIX     

u'********************'

TIME_ZONE   

'America/Chicago'

FILE_UPLOAD_MAX_MEMORY_SIZE     

2621440

EMAIL_BACKEND   

'django.core.mail.backends.smtp.EmailBackend'

DEFAULT_TABLESPACE  

''

TEMPLATE_CONTEXT_PROCESSORS     

('django.contrib.auth.context_processors.auth',
 'django.core.context_processors.debug',
 'django.core.context_processors.i18n',
 'django.core.context_processors.media',
 'django.core.context_processors.static',
 'django.core.context_processors.tz',
 'django.contrib.messages.context_processors.messages')

SESSION_COOKIE_AGE  

1209600

SETTINGS_MODULE     

'subterfuge.settings'

USE_ETAGS   

False

LANGUAGES_BIDI  

('he', 'ar', 'fa')

FILE_UPLOAD_TEMP_DIR    

None

INTERNAL_IPS    

()

STATIC_URL  

'/static/'

EMAIL_PORT  

25

USE_TZ  

False

SHORT_DATETIME_FORMAT   

'm/d/Y P'

PASSWORD_HASHERS    

u'********************'

ABSOLUTE_URL_OVERRIDES  

{}

CACHE_MIDDLEWARE_SECONDS    

600

DATETIME_INPUT_FORMATS  

('%Y-%m-%d %H:%M:%S',
 '%Y-%m-%d %H:%M:%S.%f',
 '%Y-%m-%d %H:%M',
 '%Y-%m-%d',
 '%m/%d/%Y %H:%M:%S',
 '%m/%d/%Y %H:%M:%S.%f',
 '%m/%d/%Y %H:%M',
 '%m/%d/%Y',
 '%m/%d/%y %H:%M:%S',
 '%m/%d/%y %H:%M:%S.%f',
 '%m/%d/%y %H:%M',
 '%m/%d/%y')

EMAIL_HOST_USER     

''

PROFANITIES_LIST    

u'********************'

You're seeing this error because you have DEBUG = True in your Django settings 
file. Change that to False, and Django will display a standard 500 page.

Please have any ideas on how can i fix it?

REALLY REALLY great job!!

Original issue reported on code.google.com by s.bennin...@gmail.com on 5 Feb 2014 at 7:12

[GoogleCodeExporter]

I am having the same issue as well

Original comment by funkyfra...@gmail.com on 7 Feb 2014 at 9:14

[GoogleCodeExporter]

The IP/PORT boxes don't appear when you select inject-ext-server? Try selecting 
another option from the drop down, and then reselect inject-ext-server, do the 
boxes now appear? If they appear, does clicking apply with them filled in solve 
your problem?

Were you doing this from the plugin page, or from the subterfuge main page 
(harvester)?

Please let me know as I need to push out a patch to solve the bug if that fixes 
your issue.

Thanks for using the tool!
Happy Hacking

Original comment by Mtoussain@gmail.com on 9 Feb 2014 at 4:18

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

Hi all,
      I too had the same issue  "when enabling the ext-server".

     the solution for this issue is simple. it is saying that "startmsf" is not found in the dictionary. 

Edit file "/usr/share/subterfuge/templates/plugins.ext" 

search for 'start-msf' and replace with 'startmsf'. you will find 4 entries. 
replace all four and start "subterfuge"

Original comment by Aduri.a...@gmail.com on 25 Feb 2014 at 4:50

[GoogleCodeExporter]

Issue 148 has been merged into this issue.

Original comment by topher.s...@gmail.com on 1 Mar 2014 at 3:45