Cant see the password details when info is submitted using https #1907
Description
Thanks for reaching out! We're happy to help resolve issues as quickly as possible.
Please use this template when creating a new issue. If you do not follow this template format, your issue may be closed without comment.
Before filing a new issue, please use the search bar at the top of the browser to search for similar issues. Also, please make sure you have read our documentation, which covers how to use Gophish.
What version of Gophish are you using?: v0.10.1 Windows 10
Brief description of the issue: The password doesnt store when when the info from site login session is submitted, i check Sumitted Data/ViewDetais : no password stored, just the email address and some kind of encrypted password.(Parameters/encpass)
What are you expecting to see happen? : I expect to get the password from the site accessing
through "https"
What are you seeing happen? it seems to be because some "https" parameters. when i open the fake site from "http"
then the password stored correctly.
If this question is related to email templates or landing pages not working as expected, please provide your template or landing page below:
Insert code herePlease provide any terminal output that may be relevant below:
Insert output here
Please provide as many steps as you can to reproduce the problem:
- Step 1 -
- Step 2 -
Activity
rarestuff commentedon Jul 24, 2020
I hoped to explain well, please let me know
jordan-wright commentedon Jul 25, 2020
There's a lot more information we need to be able to troubleshoot this. As the issue template mentions, we'll need to the relevant parts of your landing page. We'll also want to see what the network requests look like (say, from your browser's developer tools) for both a request made over HTTPS and HTTP.
rarestuff commentedon Jul 26, 2020
I up upload few images that explain the issue better
as you can see if use the phishing link http://myfakelink.whatever the data stored good, I got the email address and the password
here is the problem when i used as "https" https://myfakelink.whatever, i get email info but not the password, there is something to do? maybe something with the landing page that im using
I upload also the landing page im using
jordan-wright commentedon Jul 26, 2020
There's a lot here, so I'll just answer this a bit generally.
In a nutshell, you'll need to make sure that the form submission is via a standard
<form>element with theaction="" method="POST"attributes set. I don't really see a form element in your HTML. If things are submitted with Javascript, then you're kind of on your own. It can work, but it's not something that we really support here.I'll be honest and say that I don't immediately know why it would work over HTTP and not HTTPS. It might be related to the JS on the page- it's hard to say.
Sorry I can't be of more help! In cases like this, I recommend just building the form yourself and removing the JS used by whatever site you imported.
rarestuff commentedon Jul 26, 2020
Im great full 👍