y0k4i-1337 / gsprayer

A DOM-based G-Suite Password Sprayer
MIT License
7 stars 3 forks source link

Bug: #1

Open nimmicus opened 2 years ago

nimmicus commented 2 years ago

I would love to use this tool, but I can't figure out why this command is failing with a stack trace error. Also, verbose mode does not seem to provide any additional information.

$ poetry run ./gsprayer.py -u '<known_valid_gmail_account>' -v --rua -o ./ -H enum

.d8888b.   .d8888b.  8888888b.  8888888b.         d8888 Y88b   d88P 8888888888 8888888b.  
d88P  Y88b d88P  Y88b 888   Y88b 888   Y88b       d88888  Y88b d88P  888        888   Y88b 
888    888 Y88b.      888    888 888    888      d88P888   Y88o88P   888        888    888 
888         "Y888b.   888   d88P 888   d88P     d88P 888    Y888P    8888888    888   d88P 
888  88888     "Y88b. 8888888P"  8888888P"     d88P  888     888     888        8888888P"  
888    888       "888 888        888 T88b     d88P   888     888     888        888 T88b   
Y88b  d88P Y88b  d88P 888        888  T88b   d8888888888     888     888        888  T88b  
 "Y8888P88  "Y8888P"  888        888   T88b d88P     888     888     8888888888 888   T88b 

   > target         :  https://accounts.google.com/
   > driver         :  chrome
   > username       :  <redacted>
   > output         :  valid_users.txt
   > reset_after    :  1
   > wait           :  3 seconds
   > captchatimeout :  30
   > headless       :  True
   > rua            :  True
   > verbose        :  True
   > cmd            :  enum

>----------------------------------------<

[*] Current username: <redacted>
[ERROR] Message: 
Stacktrace:
#0 0x55b01f87f693 <unknown>
#1 0x55b01f678b0a <unknown>
#2 0x55b01f6b15f7 <unknown>
#3 0x55b01f6b17c1 <unknown>
#4 0x55b01f6e4804 <unknown>
#5 0x55b01f6ce94d <unknown>
#6 0x55b01f6e24b0 <unknown>
#7 0x55b01f6ce743 <unknown>
#8 0x55b01f6a4533 <unknown>
#9 0x55b01f6a5715 <unknown>
#10 0x55b01f8cf7bd <unknown>
#11 0x55b01f8d2bf9 <unknown>
#12 0x55b01f8b4f2e <unknown>
#13 0x55b01f8d39b3 <unknown>
#14 0x55b01f8a8e4f <unknown>
#15 0x55b01f8f2ea8 <unknown>
#16 0x55b01f8f3052 <unknown>
#17 0x55b01f90d71f <unknown>
#18 0x7f95b6487b27 <unknown>

==============================
[*] Username Enumeration Stats
==============================
[*] Total Usernames Tested:  0
[*] Valid Usernames:         0
[*] Invalid Usernames:       0
nimmicus commented 2 years ago

Here is the versioning info for the dependencies.

async-generator    1.10      Async generators and context managers for Python 3.5+
attrs              21.4.0    Classes Without Boilerplate
blinker            1.4       Fast, simple object-to-object and broadcast signaling
brotli             1.0.9     Python bindings for the Brotli compression library
certifi            2021.10.8 Python package for providing Mozilla's CA Bundle.
cffi               1.15.0    Foreign Function Interface for Python calling C code.
charset-normalizer 2.0.12    The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.
colorama           0.4.4     Cross-platform colored terminal text.
configparser       5.2.0     Updated configparser from Python 3.8 for Python 2.6+.
crayons            0.4.0     TextUI colors for Python.
cryptography       36.0.1    cryptography is a package which provides cryptographic recipes and primitives to Python developers.
h11                0.13.0    A pure-Python, bring-your-own-I/O implementation of HTTP/1.1
h2                 4.1.0     HTTP/2 State-Machine based protocol implementation
hpack              4.0.0     Pure-Python HPACK header compression
hyperframe         6.0.1     HTTP/2 framing layer for Python
idna               3.3       Internationalized Domain Names in Applications (IDNA)
kaitaistruct       0.9       Kaitai Struct declarative parser generator for binary data: runtime library for Python
outcome            1.1.0     Capture the outcome of Python function calls.
pyasn1             0.4.8     ASN.1 types and codecs
pycparser          2.21      C parser in Python
pyopenssl          22.0.0    Python wrapper module around the OpenSSL library
pyparsing          3.0.8     pyparsing module - Classes and methods to define and execute parsing grammars
pysocks            1.7.1     A Python SOCKS client module. See https://github.com/Anorov/PySocks for more information.
requests           2.27.1    Python HTTP for Humans.
selenium           4.1.0     
selenium-wire      4.6.3     Extends Selenium to give you the ability to inspect requests made by the browser.
sniffio            1.2.0     Sniff out which async library your code is running under
sortedcontainers   2.4.0     Sorted Containers -- Sorted List, Sorted Dict, Sorted Set
trio               0.19.0    A friendly Python library for async concurrency and I/O
trio-websocket     0.9.2     WebSocket library for Trio
urllib3            1.26.8    HTTP library with thread-safe connection pooling, file post, and more.
webdriver-manager  3.5.2     Library provides the way to automatically manage drivers for different browsers
wsproto            1.0.0     WebSockets state-machine based protocol implementation
zstandard          0.17.0    Zstandard bindings for Python

And here is some other versioning info:

$ uname -a
Linux kali 5.18.0-kali5-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 5.18.5-1kali6 (2022-07-07) x86_64 GNU/Linux

$ /usr/bin/google-chrome --version                   
Google Chrome 105.0.5195.102
n00py commented 1 year ago

I'm running on MacOS and both Firefox and Chrome fail before it gets to the password entry screen

moscowchill commented 1 year ago

Did you figure out a workaround?