pentestgeek / phishing-frenzy

Ruby on Rails Phishing Framework
www.phishingfrenzy.com
GNU General Public License v3.0
770 stars 293 forks source link

$uid #386

Closed ebakirmak closed 6 years ago

ebakirmak commented 6 years ago

Hello,

I created a new campaign, i copied your login.php, process.php and email file. All things perfected. I sended phising mails but when i clicked phising url, uid isn't returning (in other words $uid=""). Can you help me?

zeknox commented 6 years ago

As long as your email body has a link in the phishing email like below:

<a href="<%= @url %>">here</a>

Phishing Frenzy knows to add the UID to the end of the phishing url that you have defined within the campaign settings.

ebakirmak commented 6 years ago

$uid is showing in url of login.php but i can't use $uid variable login.php and $uid variable can't return to process.php.

within login.php this code isn't showing nothing (the $uid). it is returning empty alert. <?php echo "<script type='text/javascript'>alert('$uid');</script>"; ?>

zeknox commented 6 years ago

This sounds like you're not passing along the UID to the form action like below:

action="process.php?uid=<?php echo $uid ?>"

This way process.php will be passed the uid parameter and all should work.