{"action":"created","issue":{"url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/issues/342","repository_url":"https://api.github.com/repos/pentestgeek/phishing-frenzy","labels_url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/issues/342/labels{/name}","comments_url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/issues/342/comments","events_url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/issues/342/events","html_url":"https://github.com/pentestgeek/phishing-frenzy/issues/342","id":181701963,"number":342,"title":"Click Tracking","user":{"login":"Theodolus","id":20192951,"avatar_url":"https://avatars.githubusercontent.com/u/20192951?v=3","gravatar_id":"","url":"https://api.github.com/users/Theodolus","html_url":"https://github.com/Theodolus","followers_url":"https://api.github.com/users/Theodolus/followers","following_url":"https://api.github.com/users/Theodolus/following{/other_user}","gists_url":"https://api.github.com/users/Theodolus/gists{/gist_id}","starred_url":"https://api.github.com/users/Theodolus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Theodolus/subscriptions","organizations_url":"https://api.github.com/users/Theodolus/orgs","repos_url":"https://api.github.com/users/Theodolus/repos","events_url":"https://api.github.com/users/Theodolus/events{/privacy}","received_events_url":"https://api.github.com/users/Theodolus/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-10-07T15:40:54Z","updated_at":"2016-10-07T17:18:05Z","closed_at":null,"body":"Been working at getting this up and running for a while now and am stuck on the last bit needed before I can start using it for in house testing. Before I go any further, here is the output of apachectl -S.\r\n\r\nVirtualHost configuration:\r\n*:80                   is a NameVirtualHost\r\n         default server phish.company.local (/etc/apache2/sites-enabled/000-default.conf:1)\r\n         port 80 namevhost phish.company.local (/etc/apache2/sites-enabled/000-default.conf:1)\r\n         port 80 namevhost friendly.pf.com (/etc/apache2/sites-enabled/7.conf:1)\r\n                 alias friendly.pf.com\r\n*:443                  is a NameVirtualHost\r\n         default server friendly.pf.com (/etc/apache2/sites-enabled/7.conf:8)\r\n         port 443 namevhost friendly.pf.com (/etc/apache2/sites-enabled/7.conf:8)\r\n                 alias friendly.pf.com\r\n         port 443 namevhost pf.com (/etc/apache2/pf.conf:19)\r\n                 alias phish.pf.com\r\n                 alias friendly.pf.com\r\nServerRoot: \"/etc/apache2\"\r\nMain DocumentRoot: \"/var/www/html\"\r\nMain ErrorLog: \"/var/log/apache2/error.log\"\r\nMutex ssl-cache: using_defaults\r\nMutex default: dir=\"/var/lock/apache2\" mechanism=fcntl\r\nMutex watchdog-callback: using_defaults\r\nMutex ssl-stapling-refresh: using_defaults\r\nMutex ssl-stapling: using_defaults\r\nPidFile: \"/var/run/apache2/apache2.pid\"\r\nDefine: DUMP_VHOSTS\r\nDefine: DUMP_RUN_CFG\r\nUser: name=\"www-data\" id=33 not_used\r\nGroup: name=\"www-data\" id=33 not_used\r\n\r\nApplication Site URL is https://friendly.pf.com\r\n\r\nI can go to this URL and configure campaigns and whatnot and everything works fantastically until I activate the site. The campaign site then goes live and I am booted from the screen. I can then access PF via phish.pf.com and launch the campaign. E-mails are sent correctly and when I receive the e-mail and click on the link it takes me to https://friendly.pf.com/?uid=XXXXXXXX as expected. But it never registers a click. If I go to https://frienly.pf.com/reports/results/?uid=XXXXXXXX I get a 404. But if I go to https://phish.pf.com/reports/results/?uid=XXXXXXXX I get a page that says [start, uid check, length 1, over 1, ] and the reports on the phish.pf.com/reports/list page immediately registers the click. So obviously the click tracking is working and the e-mail link is incorrect. \r\n\r\nIn the campaign I specified the Phishing URL as https://friendly.pf.com/index.php and the FQDN as friendly.pf.com. But if I switch both of those to phish.pf.com (and either change or leave the Application Site URL) and activate the campaign I immediately lose access to the phish.pf.com site and have to go to friendly.pf.com to access the dashboard and the results above are inverted. I feel like I'm just entering in the various URLs incorrectly and am probably bashing my head against this without seeing the obvious solution.\r\n\r\nA final note to this is that I am using Ubuntu Server 16. I did see a reply about a week ago that there are issues with it and the recommended route is to go with 14 but since I'm so close to getting this working I really don't want to go all the way back to square one and start over. In fact at this point, other than the click tracking the only thing I'm struggling with is getting sidekiq to actually run under systemd as a service. The service runs, but PF never recognizes that it is running. And with it running I can execute the rvmsudo bundle command and get it running manually and it works fine. But I'm still bashing my head against that one and think I may be on track to getting it working. In any case I'll put up any information I come up with in case it will help anyone else trying to get this working.\r\n\r\nThanks for any help!"},"comment":{"url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/issues/comments/252309925","html_url":"https://github.com/pentestgeek/phishing-frenzy/issues/342#issuecomment-252309925","issue_url":"https://api.github.com/repos/pentestgeek/phishing-frenzy/issues/342","id":252309925,"user":{"login":"zeknox","id":2473269,"avatar_url":"https://avatars.githubusercontent.com/u/2473269?v=3","gravatar_id":"","url":"https://api.github.com/users/zeknox","html_url":"https://github.com/zeknox","followers_url":"https://api.github.com/users/zeknox/followers","following_url":"https://api.github.com/users/zeknox/following{/other_user}","gists_url":"https://api.github.com/users/zeknox/gists{/gist_id}","starred_url":"https://api.github.com/users/zeknox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zeknox/subscriptions","organizations_url":"https://api.github.com/users/zeknox/orgs","repos_url":"https://api.github.com/users/zeknox/repos","events_url":"https://api.github.com/users/zeknox/events{/privacy}","received_events_url":"https://api.github.com/users/zeknox/received_events","type":"User","site_admin":false},"created_at":"2016-10-07T17:18:05Z","updated_at":"2016-10-07T17:18:05Z","body":"No, you really should have 2 uniq FQDNs.  You need to have a uniq FQDN for the PF UI (pf.phish.local for example, and then you would put this within the Global Settings Application Site URL because this is how PF knows how to track clicks), then you need a separate FQDN that is different than the PF UI for your phishing sites."}}
{"actor":{"display_login":"zeknox"}}