Closed GoogleCodeExporter closed 9 years ago
here is the error log
Original comment by Weston...@gmail.com
on 28 Oct 2011 at 1:40
Attachments:
Hi, sorry for the late response.
So the issue is that you are unable to sniff any user credentials? Have you
tried with Facebook or web forums (phpBB based or similar)?
I might soon create a simple test page for verifying that Nighthawk actually
works and you'll be able to try it again and possibly determine the reason why
it doesn't show you anything at present.
As far as the crash is concerned, I think I have fixed it in the next build
(0.9.1) and I'll be uploading it soon.
Original comment by klemen.b...@gmail.com
on 8 Nov 2011 at 9:16
The problem is I don't get any packets/webpages at all. I posted the screen
shots. I tried Facebook and other sites but it just didn't manage to pick up
any packets. At test site would be a great idea just to insure that everything
is working. When you post the new version I will download and install it to
see if it works. I hope we can resolve this issue as I would very much like to
see this tool working right! Keep up the good work!
Original comment by Weston...@gmail.com
on 9 Nov 2011 at 1:54
Hi, the 0.9.1 version is up, so we can now debug any crashes you may encounter
(after the exception window opens click "Send and quit" and instead of a .TXT
file you will now see a .ZIP file with error information that you can attach
here).
I've also created a simple test page that you can open on your "victim"
computer and play with it - http://dev.bratec.si/nighthawk/.
Original comment by klemen.b...@gmail.com
on 13 Nov 2011 at 12:23
Ok, so i got it to work!!! it might have something to do with me running
windump and rpcap on my computer at the same time in coordination with night
hawk... im not sure. anyhow, i was playing with the link you provided and it
was working fine. i captured credentials from the site. however i cannot seem
to capture credentials from any other sites (facebook, gmail). perhaps im
doing something wrong but idt so. the ssl stripper is working correctly
according to the test site so im a bit bewildered.
Original comment by Weston...@gmail.com
on 16 Nov 2011 at 8:20
Hm... it looks like Facebook is defaulting to "https". If you visit
"facebook.com" by directly typing in "https://facebook..." this won't work
(which is not what a majority does - I've tried it :P). And about GMAIL... it
won't work because it only allows connections through HTTPS (the original
"linux" version of SSLstrip can do this, but it is damn hard to do something
similar on windows).
If you visit facebook through the ordinary home page (https://facebook.com/),
Nighthawk should capture the credentials. If the user is already logged in, it
should also log him out (when "strip cookies" is enabled - it won't, however,
do it when https mode is enabled).
Original comment by klemen.b...@gmail.com
on 16 Nov 2011 at 8:28
it dosent work for me nothing show in userneme and password plz help
creat a video tutorial if u can ..m waiting ........pm me shoaib00226@gmail.com
Original comment by shoaib00...@gmail.com
on 23 Jun 2012 at 9:39
Original comment by klemen.b...@gmail.com
on 12 Nov 2013 at 5:07
Original issue reported on code.google.com by
Weston...@gmail.com
on 28 Oct 2011 at 1:12Attachments: