Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error regarding credential harvester #1096

Open
Aysh999 opened this issue Sep 29, 2024 · 0 comments
Open

Error regarding credential harvester #1096

Aysh999 opened this issue Sep 29, 2024 · 0 comments

Comments

@Aysh999
Copy link

Aysh999 commented Sep 29, 2024

Hello
So i was testing this tool for a phishing project and tried the credential harvester on instagram.
i tried it with setting up ngrok.
And when i entered the username and password on the cloned site
An error comes which shows the following:-

] WE GOT A HIT! Printing the output:
POSSIBLE PASSWORD FIELD FOUND: enc_password=#PWD_INSTAGRAM_BROWSER:10:1727623626:Ae9QAPA4RKnD5YH+Wp8QSe1mbvrZ2O8Ib+boWT1THTwEAr54YOZ2LLEEx42C2VLLZ9HmSPXJMYDIaARW/w87Odf9IJKURGNccSKUkmUevxjBF6cRrSE1G5YLQlnpZdHe0ugH62xs0osKrDI=
PARAM: caaF2DebugGroup=0
POSSIBLE USERNAME FIELD FOUND: loginAttemptSubmissionCount=0
PARAM: optIntoOneTap=false
PARAM: queryParams={}
PARAM: trustedDeviceRecords={}
POSSIBLE USERNAME FIELD FOUND: username=github1234
[
] WHEN YOU'RE FINISHED, HIT CONTROL-C TO GENERATE A REPORT.


Exception occurred during processing of request from ('127.0.0.1', 43378)
Traceback (most recent call last):
File "/usr/lib/python3.11/socketserver.py", line 691, in process_request_thread
self.finish_request(request, client_address)
File "/usr/lib/python3.11/socketserver.py", line 361, in finish_request
self.RequestHandlerClass(request, client_address, self)
File "/usr/lib/python3.11/socketserver.py", line 755, in init
self.handle()
File "/usr/lib/python3.11/http/server.py", line 436, in handle
self.handle_one_request()
File "/usr/lib/python3.11/http/server.py", line 424, in handle_one_request
method()
File "/usr/share/set/src/webattack/harvester/harvester.py", line 303, in do_POST
url = urldecode(qs)
^^^^^^^^^^^^^
File "/usr/share/set/src/webattack/harvester/harvester.py", line 209, in urldecode
url = url.decode('utf-8')
^^^^^^^^^^^^^^^^^^^
UnicodeDecodeError: 'utf-8' codec can't decode byte 0x9c in position 251: invalid start byte

so it shows me the username but not the password
help me fix this
thanks.

@Aysh999 Aysh999 changed the title credential harvester attack regarding error Error regarding credential harvester Sep 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant