The Ethical Hacker Network - Why won't this HTML load in Firefox???

bobby_here

Newbie

Offline

Posts: 14

Why won't this HTML load in Firefox???

« on: June 06, 2012, 02:07:36 PM »

Hello!

Are any of you guys familiar with the Social Engineer Toolkit?

I am attempting to use its Credential Harvester program but I ran into a slight problem.

The Credential Harvester clones a website which has POST login forms. All POST information is transmitted to the attacker once the target connects to his IP and enters details.

I am having problems with Hotmail. The only site seems to be login.live.com. Everything redirects to this site so I have no alternatives to clone.

I clone the site in the Harvester which seems to work. This process creates an index.html file. I then go to my IP address which loads the index.html but all I see is a blank page. The source reveals that the page has, in fact, loaded but nothing is displayed.

I believed that the problem was the base href="" (empty) so I set it to https://login.live.com/pp1300 which (should you enter this) will take you to login.live.com. However, this did not change anything as the page still refused to load.

The source of the index.html (from Firefox) claims that JavaScript is disabled. This is not the case. And I also unloaded NoScript and HTTPS-Everywhere to simulate a 'normal' browser.

Does any one know why the page will not load? Thanks!

Initial source below (I can provide more should you wish).

<html dir="ltr" lang="EN-US"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=5"/><script type="text/javascript">var g_dtFirstByte=new Date();</script><base href=""/><noscript><meta http-equiv="Refresh" content="0; URL=https://login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033"/>Windows Live ID requires JavaScript to sign in. This web browser either does not support JavaScript, or scripts are being blocked.<br /><br />To find out whether your browser supports JavaScript, or to allow scripts, see the browser's online help.</noscript><title>Sign In</title><meta name="description" content="Powerful free e-mail with security from Microsoft - Windows Live Hotmail is a best in class e-mail service that helps you organize and manage all your online stuff in one place"/><meta name="PageID" content="i5030"/><meta name="SiteID" content="64855"/><meta name="ReqLC" content="1033"/><meta name="LocLC" content="1033"/><script type="text/javascript"></script><link rel="shortcut icon" href="http://Https://secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/favicon.ico" />
<link rel="image_src" href="http://Https://secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/Windows_Live_v_thumb.jpg" / >


	Logged

hayabusa

Hero Member

Offline

Posts: 1633

Re: Why won't this HTML load in Firefox???

« Reply #1 on: June 06, 2012, 02:51:55 PM »

Without actually looking at this, with you, the image links (in blue) towards the bottom, do not appear to be valid. So no images will appear on the screen, if those can't be resolved...

It appears it's dropping the : after https, when you click those links... If the whole page is rendering like that, nothing is going to be seen in your browser... If you click them, and manually add the : in the URL bar, where it belongs, the images are viewable. My guess is that it's doing that to all the links on the page...


	Logged

~ hayabusa ~

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH

bobby_here

Newbie

Offline

Posts: 14

Re: Why won't this HTML load in Firefox???

« Reply #2 on: June 06, 2012, 04:40:48 PM »

I don't know why the links show http://https:// but in the source that I downloaded they render as normal https://

For example this does work:Https://secure.shared.live.com/~Live.SiteContent.ID/~16.3.16/~/~/~/~/images/favicon.ico

I don't know of the http://https:// was what you meant?

I think that the problem is shown here: https://login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033

The page reads:

JavaScript required to sign in

Windows Live ID requires JavaScript to sign in. This web browser either does not support JavaScript, or scripts are being blocked.

To find out whether your browser supports JavaScript, or to allow scripts, see the browser's online help.

What I do not understand is why it claims this even thought I have JavaScript enabled and have disabled anything that might in any way interfere with JavaScript.

I don't know if this is a problem with the Social Engineer Toolkit or something else.


	Logged

hayabusa

Hero Member

Offline

Posts: 1633

Re: Why won't this HTML load in Firefox???

« Reply #3 on: June 06, 2012, 08:36:24 PM »

Had a longer reply typed, but smartphone connection timed out. Trying again...

2 things -

First, your newest example url flat out assumes javascript is disabled (see the jsDisabled.srf) Even in my phone browser, with js enabled, if I use that link, it assumes disabled, and tells me as much. If I chop that and everything after it, and just go to https://login.live.com - no error.

(Edit: note - the checking / validating js will be in the source, regardless, as the page will tell the browser what to do if js isn't allowed)

Second, as long as those other links aren't formatting correctly, you'll continue to get blank pages (you said that was the result, in your first post.) if you can click on them, and they fail, then the graphics and links associated to them won't render in your page.

I'll look closer with you, if you'd like, tomorrow, when I'm back on my PC.


« Last Edit: June 06, 2012, 08:41:31 PM by hayabusa »	Logged

~ hayabusa ~

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH

hayabusa

Hero Member

Offline

Posts: 1633

Re: Why won't this HTML load in Firefox???

« Reply #4 on: June 06, 2012, 08:50:11 PM »

Any chance you can view the source of the page, as the browser displays it, save to a text file (all of it,) and send or post it to pastebin or somewhere, for our review? Based soley on what you sent, so far, my opinion remains the same. But perhaps if I could see ALL of what's being returned to the browser, maybe I (or we) would see something more...

(Edit, again - also, if you were tripping the js check, you shouldn't be getting BLANK pages, as you first stated you did. Rather, you'd get the message, in the page, that js was disabled.)


« Last Edit: June 06, 2012, 08:54:00 PM by hayabusa »	Logged

~ hayabusa ~

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH

bobby_here

Newbie

Offline

Posts: 14

Re: Why won't this HTML load in Firefox???

« Reply #5 on: June 10, 2012, 04:20:02 AM »

Thank you for your advice.

I use Firefox 13.0 without NoScript or HTTPS-Everywhere or any other blocker to load www.hotmail.com (which redirects to https://login.live.com) and it still has the URL=https://login.live.com/jsDisabled.srf?mkt=EN-US&lc=1033" link.

However, it does not matter because I am able to load the page.

The problem with the SET Credential Harvester (https://www.secmaniac.com/movies/ - scroll down for the video) is that it changes the <base href="https://login.live.com/pp1300/" into <base href="" which prevents the page from loading.

The Credential Harvester requires POSTs which the Hotmail login no longer contains. Therefore the Harvester is incompatible with Hotmail.

Here is the Pastebin for the 'standard' login screen (from my browser not Credential Harvester) - http://pastebin.com/jEDwYF6E

I don't think it's interesting through. Like I said: the JS disabled doesn't prevent the page from loading (for me at least).


	Logged

Pages: [1] Go Up

« previous next »