trustedsec / social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
10.96k stars 2.77k forks source link

Problem cloning websites #717

Open csirgo opened 4 years ago

csirgo commented 4 years ago

I am doing a class work about SET and I wanted to show an example of cloning a website and I wasn't able to do it with Instagram or Facebook

I tried both the 3) Credential Harvester Attack Method and the 5) Web Jacking Attack Method.

However, in the first one, the redirect doesn't work and I ended up in the truly Instagram page and if I try to access the clonned one, I obtain a empty page with a little Instagram logo that reloads all the time. In the second one I get a full empty page.

I also tried with Facebook and it is clonned correctly but the credentials aren't collected.

Finally, I tried with Twitther, which worked perfectly. The redirect worked, the credentials were collected and the page was correctly clonned.

I don't know if this is a bug or there are pages that cannot be clonned and if so is there any method to know which ones can be clonned?

I am using the last version of SET and I'm running it on an Ubuntu Server Virtual Machine updated to the last version too. As it doesn't have GUI I'm using the browser from the host to acces the pages, I don't know if this could be the reason why I had so many problems.

momobit commented 4 years ago

I would know the same.. I have exatly your same "problem/question (I don' try twitter)and I use last version of kali linux mountes VM oracle box