tag:blogger.com,1999:blog-6091241131056531264.post7160863851788303805..comments2024-03-28T19:49:27.820+05:30Comments on Best Kali Linux Tutorials: Modlishka -- Advanced Phishing | Bypass Two Factor AuthenticationKali Linuxhttp://www.blogger.com/profile/07345541575706459646noreply@blogger.comBlogger66125tag:blogger.com,1999:blog-6091241131056531264.post-47743100496672205982023-09-27T19:12:21.604+05:302023-09-27T19:12:21.604+05:30This is somewhat of a bug in pre-1.17 behavior, bu...This is somewhat of a bug in pre-1.17 behavior, but poses a question about what we should do in the post-1.17 parser. The pre-1.17 parser ignores the class of the ASN.1 tag for each name, meaning it accepts tags with the correct context-specific tag, but invalid class bits, such as in this case (from your example the full tag is 0x06, so the class bits are 000, and the tag is 0x06). This means we attempt to parse a random OID as a URI, which is obviously wrong, and throws an error.<br /><br />In the post-1.17 parser we are more strict, validating that the class bits are correct for the tag, ignoring the strange entries in the SubjectAltName. This is, I believe, the correct behavior.<br /><br />This does pose a question though, we currently accept entries in the SEQUENCE OF which contain both context-specific tags >8, the highest tag specified in RFC 5280, and invalid class bits. It may be prudent, and catch cases like this, to throw an error when we hit these cases, since they are not spec compliant. Since crypto/x509 explicitly targets the web PKI, it seems acceptable to refuse to accept these types of malformed certificates, which while may be acceptable elsewhere, are invalid according to the rules of RFC 5280.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-86637635576299578772023-09-25T21:40:07.475+05:302023-09-25T21:40:07.475+05:30!!! x509: malformed certificate . Terminating. th...!!! x509: malformed certificate . Terminating. that is the response i keep gettingAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-73065555879031040742023-05-25T16:45:24.351+05:302023-05-25T16:45:24.351+05:30Nice fake replies to your own post lol, even spell...Nice fake replies to your own post lol, even spelled "great" wrong in the same way...Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-74931503501423790202022-07-15T00:12:58.617+05:302022-07-15T00:12:58.617+05:30How did you generate the certificate? remember tha...How did you generate the certificate? remember that CA certificate goes to the autocert plugin (used for testing), while the final certificate (that should be also signed by a trusted CA) is set in the json fileKali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-85146117912991615352022-07-07T12:57:33.435+05:302022-07-07T12:57:33.435+05:30Firefox can’t establish a connection to the server...Firefox can’t establish a connection to the server at www.loopback.modlishka.io. <br /><br />Any solution to this??<br />Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-45560725032914764852021-12-29T18:07:44.968+05:302021-12-29T18:07:44.968+05:30Please run ls command and make sure that there is ...Please run ls command and make sure that there is file named "makefile". I think you didn't properly cloned the Modlishka repository from GitHub. Thanks.Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-64331410286229902021-12-29T12:05:31.399+05:302021-12-29T12:05:31.399+05:30When I run make. Here is what I got. Please help.
...When I run make. Here is what I got. Please help.<br />make: *** No targets specified and no makefile found. Stop.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-33648055694352299392021-12-09T08:40:21.898+05:302021-12-09T08:40:21.898+05:30This seems problem in your 'go'. Make sure...This seems problem in your 'go'. Make sure that you have updated version of go. Then start everything from the very beginning.Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-74302134708058546952021-12-08T04:15:53.361+05:302021-12-08T04:15:53.361+05:30I was able to make my private key but when I run &...I was able to make my private key but when I run "make" it says go.mod file not found. Where can I find this file? Thank youAnonymoushttps://www.blogger.com/profile/11621165533007820286noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-10700876980186636782021-11-03T18:25:39.322+05:302021-11-03T18:25:39.322+05:30Modlishka admin solved this. But We don't know...Modlishka admin solved this. But We don't know why they don't make it public. Here you can see what the creator of Modlishka said on <a href="https://github.com/drk1wi/Modlishka/issues/167#issuecomment-650703263" rel="nofollow">GitHub.</a>Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-79670782709473816722021-11-02T23:45:41.849+05:302021-11-02T23:45:41.849+05:30I got also the error this browser or app not secur...I got also the error this browser or app not secure<br />how can solve it?<br /><br />Should I edit the template json with address and port? and how edit it?<br />thanksPathttps://www.blogger.com/profile/12458265069993723180noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-25415649766219643262021-10-15T17:39:09.590+05:302021-10-15T17:39:09.590+05:30You just have to copy and paste the cert and key t...You just have to copy and paste the cert and key to the autocert.go and "make". no need to add any '\n' chars. no need to add anything to json after this. autocert generates certificates on its own.Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-79426632526963040182021-10-15T12:02:23.587+05:302021-10-15T12:02:23.587+05:30someone help me
after I run the command:
./dist/pr...someone help me<br />after I run the command:<br />./dist/proxy -config templates/google.com_gsuite.json<br />I got the following error:!!! Error unmarshalling JSON configuration (templates/google.com_gsuite.json): invalid character 'x' looking for beginning of value . Terminating.<br /> someone help me<br />thank youharryhttps://www.blogger.com/profile/12458021539921871937noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-39969933254991754282021-09-27T09:59:16.752+05:302021-09-27T09:59:16.752+05:30Please read carefully you will be able to generate...Please read carefully you will be able to generate firefox certificates. This article is older so the options in firefox <b>may be</b> moved to other places. But you can find them easily.<br /><br />Thanks. Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-68993072322528983732021-09-25T17:30:16.744+05:302021-09-25T17:30:16.744+05:30go this step , i cannot run commands : cd root/go...go this step , i cannot run commands : cd root/go/src/github.com/drk1wi/Modlishka <br /><br /><br />someone help me<br />my telegram @harrychung<br />thanksharryhttps://www.blogger.com/profile/12458021539921871937noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-18870001315305645722021-09-20T16:15:18.271+05:302021-09-20T16:15:18.271+05:30i can't impoer certificate into firefox please...i can't impoer certificate into firefox please help, can you teach how to change target domainyestitsmehttps://www.blogger.com/profile/15022711728318988385noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-19783885560463417622021-07-12T00:59:23.839+05:302021-07-12T00:59:23.839+05:30Give it a try. We seriously don't know much ab...Give it a try. We seriously don't know much about now.Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-91245273283925060992021-07-12T00:37:35.701+05:302021-07-12T00:37:35.701+05:30Tool still working?Tool still working?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-14973245096041617262021-03-26T17:28:43.421+05:302021-03-26T17:28:43.421+05:30It is simple. It means you need to install ssh. Tr...It is simple. It means you need to install ssh. Try following commands on terminal:<br /><br />sudo apt update<br />sudo apt install openssh-server<br /><br />That's all. Hope this help you. Thanks.Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-87788256228544708122021-03-25T13:51:18.693+05:302021-03-25T13:51:18.693+05:30Its showing ssh not installed
Its showing ssh not installed<br />Anonymoushttps://www.blogger.com/profile/06247066650642862362noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-56777040413412390182021-03-22T16:25:47.547+05:302021-03-22T16:25:47.547+05:30I have exactly the same problem. Tried it with mou...I have exactly the same problem. Tried it with mousepad, got an error: 'Unable to init server: could not connect: connection refused' GtK warming: IP adress: cannot open display. How do we fix this?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-58730467882736036902021-02-18T12:50:21.610+05:302021-02-18T12:50:21.610+05:30Yap. We need their assistance. If you found anythi...Yap. We need their assistance. If you found anything please tell us. Thanks.Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-31210706340255720042021-02-18T09:29:18.421+05:302021-02-18T09:29:18.421+05:30Thats also my problem the developer seems to have ...Thats also my problem the developer seems to have disappeared as he hasn't replied to any of the post there.<br />At this stage I only checked with google cause that was my main reason to look into this program now im currently searching for another one which would give me the same benefits as modlishka.<br />I think I will check it with other sides aswell to see if it is only google or more, cause that would actually indicate at least in the direction were we need to look at.<br />I couldn't find any other (active) side whos still dealing with modlishka they all got tutorials, but when it comes to people who need assistance they all seem to have disappeared unfortunately.... Anonymoushttps://www.blogger.com/profile/13019428081436858562noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-15724741266521532792021-02-18T08:42:52.406+05:302021-02-18T08:42:52.406+05:30This happens with us also. We have seen in this pr...This happens with us also. We have seen in this problem happens with lots of people.<br />You can check this <a href="https://github.com/drk1wi/Modlishka/issues/240" rel="nofollow">issue on modlishka repository</a>. But the developers didn't replayed. Did this happens with only Google?Kali Linuxhttps://www.blogger.com/profile/07345541575706459646noreply@blogger.comtag:blogger.com,1999:blog-6091241131056531264.post-8914350538106350492021-02-18T06:09:04.712+05:302021-02-18T06:09:04.712+05:30HI I installed modlishka and everything seems to b...HI I installed modlishka and everything seems to be working fine apart from one issue i face:<br />If i try to log in from firefox its telling me couldnt sign you in after just enterring the email address and pressing next.<br />In chrome after putting the email address and pressing next i get the message cookies disabled.<br />i aready checked the browser settings cookies are all allowed and i even added the link in the cookie list just to see, but same problem.<br /><br />Do i need to adjust anything in the json file or where could my problem be ?<br />Any help would be much appriciatedAnonymoushttps://www.blogger.com/profile/13019428081436858562noreply@blogger.com