White Page after entering the email

waelmas / frameless-bitb

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

BSD 3-Clause "New" or "Revised" License

321 stars 35 forks source link

White Page after entering the email #15

Open unknownNeo opened 2 weeks ago

unknownNeo commented 2 weeks ago

After entering the email, whole page get reload and the pop get closed and the url redirect to sso.fake.com ( https://sso.fake.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.fake.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuARmP_T4Wvz8keucCcYmDcsWB8xi5IzPySwDq1zFqEzYOP0LjIwvGBlvMQn6F6V7poQXu6WmpBYllmTm511gEXjFwmPAbMXBwSXAIMGgwPCDhXERK9BWDl6TtQUrZ7mudP3SOlVDleEUq35FWll4ZF5ASYpXmHdWVZ52ea5piU-mb5WfS2VkSlB5aIBLuKelb1FSaKWrrZGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvtfb7jw8fHH5O49X_DplUVmOjsWZJs6BxkGOyeaOIUFhlm6W2cb5XmVBgUZ5KSVBnqaW-SUF-gXlthsEGB4IMAAA0&estsfed=1&uaid=f548e19be77345e29c90333480a6a350&fci=https%3a%2f%2fportal.fake.com.orgid.com&username=test%40outlook.com&login_hint=test%40outlook.com ) as shown in image

unknownNeo commented 2 weeks ago

Found the issue it is in the secondary/script.js. The targetElementSelector search for .win-scroll class which is not the the page at login.live.com the password box is in element <div class=""><div><div> the login page is redirect from login.microsoftonline.com to login.live.com which breaks the script