Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

error: 400 #452

Closed
devil-show opened this issue Jan 13, 2020 · 42 comments
Closed

error: 400 #452

devil-show opened this issue Jan 13, 2020 · 42 comments

Comments

@devil-show
Copy link

: phishlets enable linkedin (This line is command)

====Result====
[23:49:15] [inf] enabled phishlet 'linkedin'
[23:49:15] [inf] setting up certificates for phishlet 'linkedin'...
[23:49:15] [war] failed to load certificate files for phishlet 'linkedin', domain 'account.loginsecureaccount.com': open /root/.evilginx/crt/account.loginsecureaccount.com/linkedin.crt: no such file or directory
[23:49:15] [inf] requesting SSL/TLS certificates from LetsEncrypt...
[23:49:15] [!!!] acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-acct :: urn:ietf:params:acme:error:malformed :: No embedded JWK in JWS header, url:
[23:49:15] [inf] disabled phishlet 'linkedin'

anyone knows how to solve the error help me

@AlvinKuruvilla
Copy link

What domain registrar are you using: Namecheap, GoDaddy, etc?
Ddi you set up your phishing domain and server Ip correctly on Evilginx?

@devil-show
Copy link
Author

I'm using godaddy for domain name and digital ocean for vps with debian 9 installation
phishing domain and server Ip is set correctly in Evilginx. I've added the screenshot here check it out. if u know how to solve this error plz help me out.
Screenshot_2020-01-14_07-01-43
Screenshot_2020-01-14 DigitalOcean - Control Panel

@AlvinKuruvilla
Copy link

Im assuming the ip you have listed in the records is the ip where you have evilginx running
Also I would add a record entitle phishing as the host and put the value as the ip to where your running evilginx
Also check the FAQs page in the repo to make sure you have your name server configured correctly

@devil-show
Copy link
Author

you mean i need to create "A" record known as phisihing.loginsecure.com and www.phisihing.loginsecure.com. and also i need configure phishlet like phishlets hostname linkedin phisihng.loginsecureaccount.com. is that u are trying to say buddy

@AlvinKuruvilla
Copy link

When I was setting up my phishlet I just had an A record that had "LinkedIn" as the hostname value though it might be different because outlook has a lot more stuff to it
But what exactly is the name of your domain? Because what I suggest is that you have some thing that follows the pattern of linked.youdomain but of course adapt it to what your trying to do
I hope that made sense

@devil-show
Copy link
Author

my domain name is loginsecureaccount.com and i bought that from godaddy and nameservers are set to digitalocean. The problem facing in Evilginx is whenever im trying to enable phishlet , it's unable to obtain certificates.

@devil-show
Copy link
Author

does evilginx2 is working for you perfectly

@devil-show
Copy link
Author

Im running evilginx2 from local directory like:

sudo ./bin/evilginx -p ./phishlets/

@AlvinKuruvilla
Copy link

I run it simply with sudo evilginx but I think the way you are doing it is fine

@AlvinKuruvilla
Copy link

So in your case since your using the outlook phishlet I would recommend that you create an A record with the value of outlook pointing your ip address where your running evilginx

@devil-show
Copy link
Author

So in your case since your using the outlook phishlet I would recommend that you create an A record with the value of outlook pointing your ip address where your running evilginx

thanks alvin for u great advice....

I've figured out that some service running on port 53 and had a problem with dns. once i solved those issues evilginx runned successfully.

other problem that now I'm facing is i successfully got the cookie of victim .once i put that cookie in edit-this-cookie and refreshed the page the victims page is.not loading

@carlelmer1954
Copy link

acme: Error -> One or more domains had a problem:
[login.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for login.login.microsoftonline.com.off1ce365.co.vu, url:
[www.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.login.microsoftonline.com.off1ce365.co.vu, url:

CAN ANYONE HELP ME OUT WITH THIS

@carlelmer1954
Copy link

Pls help me out with it

@carlelmer1954
Copy link

acme: Error -> One or more domains had a problem:
[login.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for login.login.microsoftonline.com.off1ce365.co.vu, url:
[www.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.login.microsoftonline.com.off1ce365.co.vu, url:

CAN ANYONE HELP ME OUT WITH THIS

@arinze12345
Copy link

acme: Error -> One or more domains had a problem:
[login.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for login.login.microsoftonline.com.off1ce365.co.vu, url:
[www.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.login.microsoftonline.com.off1ce365.co.vu, url:

CAN ANYONE HELP ME OUT WITH THIS

It's not a big problem...I can help you out with it...I won't take anything from you...(rickorkins@gmail.com)

@carlelmer1954
Copy link

i jst connect u on hangout

@devil-show
Copy link
Author

I too faced that issue..its just problem with name servers. check ur domain name is mappeed or not.

@devil-show
Copy link
Author

where did u got ur domain name

@carlelmer1954
Copy link

carlelmer1954 commented Jan 21, 2020 via email

@carlelmer1954
Copy link

carlelmer1954 commented Jan 21, 2020 via email

@arinze12345
Copy link

arinze12345 commented Jan 21, 2020 via email

@carlelmer1954
Copy link

carlelmer1954 commented Jan 21, 2020 via email

@arinze12345
Copy link

arinze12345 commented Jan 21, 2020 via email

@carlelmer1954
Copy link

carlelmer1954 commented Jan 21, 2020 via email

@carlelmer1954
Copy link

carlelmer1954 commented Jan 21, 2020 via email

@carlelmer1954
Copy link

carlelmer1954 commented Jan 21, 2020 via email

@devil-show
Copy link
Author

no worries friend....i txt u

@horllste
Copy link

got my domain from godaddy pls can you help me through anydesk or teamviewer may God bless your hustle as you assist me with the problem...Amen

On Sun, Jan 19, 2020 at 3:28 PM arinze12345 @.> wrote: acme: Error -> One or more domains had a problem: [login.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for login.login.microsoftonline.com.off1ce365.co.vu, url: [www.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.login.microsoftonline.com.off1ce365.co.vu, url: CAN ANYONE HELP ME OUT WITH THIS It's not a big problem...I can help you out with it...I won't take anything from @.) — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#452?email_source=notifications&email_token=AN3KILYNUIWMNXM7J2ABAVTQ6RPR5A5CNFSM4KGGWHAKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJKTP2A#issuecomment-576010216>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN3KIL3VMHMVNNATK3HEZLDQ6RPR5ANCNFSM4KGGWHAA .

Google domain are easy to configure

@arinze12345
Copy link

arinze12345 commented Jan 22, 2020 via email

@locoanonimo
Copy link

Me pueden ayudar tengo el mismo problema .

@devil-show
Copy link
Author

its all

But restricted to some countries...

On Wed, Jan 22, 2020, 1:49 AM horllste @.*> wrote: got my domain from godaddy pls can you help me through anydesk or teamviewer may God bless your hustle as you assist me with the problem...Amen … <#m_-6773523789909005676_> On Sun, Jan 19, 2020 at 3:28 PM arinze12345 @.> wrote: acme: Error -> One or more domains had a problem: [login.login.microsoftonline.com.off1ce365.co.vu http://login.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for login.login.microsoftonline.com.off1ce365.co.vu http://login.login.microsoftonline.com.off1ce365.co.vu, url: [www.login.microsoftonline.com.off1ce365.co.vu http://www.login.microsoftonline.com.off1ce365.co.vu] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.login.microsoftonline.com.off1ce365.co.vu http://www.login.microsoftonline.com.off1ce365.co.vu, url: CAN ANYONE HELP ME OUT WITH THIS It's not a big problem...I can help you out with it...I won't take anything from @.) — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#452 <#452>?email_source=notifications&email_token=AN3KILYNUIWMNXM7J2ABAVTQ6RPR5A5CNFSM4KGGWHAKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJKTP2A#issuecomment-576010216>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN3KIL3VMHMVNNATK3HEZLDQ6RPR5ANCNFSM4KGGWHAA . Google domain are easy to configure — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#452?email_source=notifications&email_token=ANKXTUMVOKYXCMPCMS2GCX3Q67UBBA5CNFSM4KGGWHAKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJSNS4A#issuecomment-577034608>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ANKXTUOIMNTIXP3YPW5SHUTQ67UBBANCNFSM4KGGWHAA .

its dns error..you should configure it correctly...and check whether ports 53,443 are open before running evilginx

@locoanonimo
Copy link

locoanonimo commented Jan 24, 2020 via email

@arinze12345
Copy link

arinze12345 commented Jan 24, 2020 via email

Repository owner deleted a comment Jan 25, 2020
Repository owner deleted a comment from spam441 Jan 25, 2020
@arinze12345
Copy link

arinze12345 commented Jan 25, 2020 via email

@arinze12345
Copy link

Me pueden ayudar tengo el mismo problema .

i can help you with your problem...rickorkins@gmail.com

@carlelmer1954
Copy link

carlelmer1954 commented Feb 2, 2020 via email

@devil-show
Copy link
Author

frnds if u find any difficulties in setting up evilginx plz join my discord server
hhtps://discord.gg/CufUUux
i dont know why u all facing so many errors in setting up evilginx. just screen shot ur error and send in discord i try to solve it out.
I have installation instructions in a text file plz dm me to get it and u wont face any issue.

@carlelmer1954
Copy link

carlelmer1954 commented Feb 2, 2020 via email

@devil-show
Copy link
Author

to my knowledge ..evilginx doesnot have gmail phishlet yet

@carlelmer1954
Copy link

carlelmer1954 commented Feb 2, 2020 via email

@carlelmer1954
Copy link

carlelmer1954 commented Feb 3, 2020 via email

@OhamsEmeka
Copy link

: phishlets enable linkedin (This line is command)

====Result==== [23:49:15] [inf] enabled phishlet 'linkedin' [23:49:15] [inf] setting up certificates for phishlet 'linkedin'... [23:49:15] [war] failed to load certificate files for phishlet 'linkedin', domain 'account.loginsecureaccount.com': open /root/.evilginx/crt/account.loginsecureaccount.com/linkedin.crt: no such file or directory [23:49:15] [inf] requesting SSL/TLS certificates from LetsEncrypt... [23:49:15] [!!!] acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-acct :: urn:ietf:params:acme:error:malformed :: No embedded JWK in JWS header, url: [23:49:15] [inf] disabled phishlet 'linkedin'

anyone knows how to solve the error help me

Please can you message me on telegram @Dragon714 to tell me how you solved it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

8 participants