{"action":"created","issue":{"url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit/issues/249","repository_url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit","labels_url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit/issues/249/labels{/name}","comments_url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit/issues/249/comments","events_url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit/issues/249/events","html_url":"https://github.com/trustedsec/social-engineer-toolkit/issues/249","id":166625556,"number":249,"title":"Credential Harvester","user":{"login":"kevinclaassens","id":14871609,"avatar_url":"https://avatars.githubusercontent.com/u/14871609?v=3","gravatar_id":"","url":"https://api.github.com/users/kevinclaassens","html_url":"https://github.com/kevinclaassens","followers_url":"https://api.github.com/users/kevinclaassens/followers","following_url":"https://api.github.com/users/kevinclaassens/following{/other_user}","gists_url":"https://api.github.com/users/kevinclaassens/gists{/gist_id}","starred_url":"https://api.github.com/users/kevinclaassens/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kevinclaassens/subscriptions","organizations_url":"https://api.github.com/users/kevinclaassens/orgs","repos_url":"https://api.github.com/users/kevinclaassens/repos","events_url":"https://api.github.com/users/kevinclaassens/events{/privacy}","received_events_url":"https://api.github.com/users/kevinclaassens/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-07-20T16:32:12Z","updated_at":"2016-07-21T01:20:55Z","closed_at":"2016-07-21T01:20:55Z","body":"When I try and use the credential harvester on a cloned site setoolkit just shows [*] This could take a little bit... and the after that the menu automatically appears. I have also checked to see if apache is running"},"comment":{"url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit/issues/comments/234131119","html_url":"https://github.com/trustedsec/social-engineer-toolkit/issues/249#issuecomment-234131119","issue_url":"https://api.github.com/repos/trustedsec/social-engineer-toolkit/issues/249","id":234131119,"user":{"login":"trustedsec","id":3160808,"avatar_url":"https://avatars.githubusercontent.com/u/3160808?v=3","gravatar_id":"","url":"https://api.github.com/users/trustedsec","html_url":"https://github.com/trustedsec","followers_url":"https://api.github.com/users/trustedsec/followers","following_url":"https://api.github.com/users/trustedsec/following{/other_user}","gists_url":"https://api.github.com/users/trustedsec/gists{/gist_id}","starred_url":"https://api.github.com/users/trustedsec/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/trustedsec/subscriptions","organizations_url":"https://api.github.com/users/trustedsec/orgs","repos_url":"https://api.github.com/users/trustedsec/repos","events_url":"https://api.github.com/users/trustedsec/events{/privacy}","received_events_url":"https://api.github.com/users/trustedsec/received_events","type":"User","site_admin":false},"created_at":"2016-07-21T01:20:55Z","updated_at":"2016-07-21T01:20:55Z","body":"Be sure you have an Internet connection and that you aren't running through a proxy. Use set-proxy if that is the case. Works fine on the latest version:\r\n\r\nset:webattack> Enter the url to clone:https://gmail.com\r\n\r\n[*] Cloning the website: https://accounts.google.com\r\n[*] This could take a little bit...\r\n\r\nThe best way to use this attack is if username and password form\r\nfields are available. Regardless, this captures all POSTs on a website.\r\n[*] Apache is set to ON - everything will be placed in your web root directory of apache.\r\n[*] Files will be written out to the root directory of apache.\r\n[*] ALL files are within your Apache directory since you specified it to ON.\r\nApache webserver is set to ON. Copying over PHP file to the website.\r\nPlease note that all output from the harvester will be found under apache_dir/harvester_date.txt\r\nFeel free to customize post.php in the /var/www/html directory\r\n[*] All files have been copied to /var/www/html\r\n[*] SET is now listening for incoming credentials. You can control-c out of this and completely exit SET at anytime and still keep the attack going.\r\n[*] All files are located under the Apache web root directory: /var/www/html\r\n[*] All fields captures will be displayed below.\r\n[Credential Harvester is now listening below...]\r\n"}}
{"actor":{"display_login":"trustedsec"}}