search

trustedsec / social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
10.72k stars 2.74k forks source link

Gmail.com Phising attack doesn't return the post data. #343

Closed 0xyg3n closed 7 years ago

0xyg3n commented 7 years ago

hello , i always liked the work you did guys i tested the tool and i used the phising attack , i tried to clone gmail.com , it works , but the post data doesn't return the output , like email password , it doesn't return anything actually. I saw the source code which was located to /var/www/html/index.html it looks right but it seems it doesn't work. :)

ghost commented 7 years ago

I too have this same problem after updating to SET version 7.4.3 yesterday. SET was working (showing POST requests) before this. apache2 seems to be updated and working (version 2.4.23-8), as well as libapache2-mod-php (1:7.0+46).

EDIT: the latest commits seem to allude to line 41 in setup.py being changed from "libapache2-mod-php" to "libapache2-mod-php5". Seeing as post.php is used to append POST data to log file, this may be useful

0xyg3n commented 7 years ago

Well i tried to work arround with some other websites , facebook and twitter works like a charm :D

canrosss commented 7 years ago

I have similar problem, can you share your solution?

canrosss commented 7 years ago

If i go directly to the post.php i get ('Array\n',) ('(\n',) (')\n',)

An empty array, i think is some between the form and the post.php i have to fix the code :(

ghost commented 7 years ago

I fixed my issue like this:

  1. upgrade everything: sudo apt-get update sudo apt-get upgrade sudo apt-get dist-upgrade (probably not necessary)

  2. disable php5 for apache2: sudo a2dismod php5

  3. enable php7: sudo a2enmod php7.0

SET works as before now.

If this does not work for you, then it is probably a good idea to undo them (switch a2enmod/dismod with relevant php module) but w/e