0

I am attempting to clone facebook to harvest credentials with SEToolkit. Everything runs but no credentials are harvested and the page never redirects to the real login. I have tried switching the IP address in the form field in the HTML to no avail. I'm running on a Kali Linux virtual box. Below is the output of what has been collected. The password fields are cryptic and the username field just gives "user=0" which I assume means it hasn't gathered anything. If anyone knows what could be blocking communication it would be a huge help, thank you!

[*] WE GOT A HIT! Printing the output: PARAM: local_storage[hb_timestamp]=13
PARAM: local_storage[signal_flush_timestamp]=13
PARAM: local_storage[Session]=20
PARAM: session_storage[TabId]=6
PARAM: session_storage[sp_pi]=216
PARAM: logtime=2
POSSIBLE USERNAME FIELD FOUND: __user=0
PARAM: __a=1
PARAM: __dyn=7xe6E5aQ1PyUbFuC1swgE98nwgU29zEdEc8uwdK0lW4o3Bw5VCwjE3awbG782Cw8G1Qw5MKdwnU1oU884y0lW0ny0RE2Jw8W0iW0lK3qaw4kwbS1Lw4Cw
PARAM: __csr=
PARAM: __req=x
PARAM: __hs=19431.BP:DEFAULT.2.0..0.0
PARAM: dpr=1
PARAM: __ccg=EXCELLENT
PARAM: __rev=1007113031
PARAM: __s=:6bof03:tzy5ox
PARAM: __hsi=7210816952893997411
PARAM: __comet_req=0
PARAM: lsd=AVodOQLZL1E
PARAM: jazoest=2882
POSSIBLE PASSWORD FIELD FOUND: __spin_r=1007113031
POSSIBLE PASSWORD FIELD FOUND: __spin_b=trunk
POSSIBLE PASSWORD FIELD FOUND: __spin_t=1678899152

3
  • We're going to need a LOT more info on how you set this up
    – schroeder
    Mar 15 at 17:27
  • @schroeder ok like what? I'm happy to provide whatever Mar 15 at 17:38
  • Maybe there's JavaScript which scrambles it for example?... Mar 15 at 20:15

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.