Gophish: Capture Credentials Not Working

Created on 9 Jan 2017 · 6Comments · Source: gophish/gophish

I am having issues capturing credentials. I went back to the basics and made a simple HTML form, but can't seem to capture any data. Is there a basic template to work off of to capture credentials? Here is an example of one Landing Page I am just trying to test to get captured credentials to work. Once that is successful I can build out from there. Both "Capture Submitted Data" and "Capture Passwords" are checked in the Landing Page. I have reviewed issue numbers 265, 294, 494, and many more. Also, have tried adding a hardcoded URL in the action field. Any suggestions?

<html><head>/<head><body>
<form action="" method="get">
First Name:<br/>
<input name="fname" type="text"/><br/>
Password:<br/>
<input name="password" type="password"/><br/>
<input type="submit" value="Submit"/> 
</form>
</body>
</html>

Source

mkannan22

Most helpful comment

I find that GoPhish seems to like the 'name' property to be defined in a form.

<form action="" method="post" name="form">
<label>Username:</label>
<input name="username" type="text"/>
<label>Password:</label>
<input name="password" type="password"/>
</form>

S0larflare on 2 May 2017

👍5 🎉2

All 6 comments

What version of Gophish are you using? One thing that's important to note is that the form "action" needs to be "POST". Trying that on my instance that's built from source seems to work just fine:

jordan-wright on 10 Jan 2017

Wow. Overthought that one. Thank you yet again. Keep the features coming. Using this tool more and more!!

mkannan22 on 10 Jan 2017

Hi,

I have this issue following the tutorial Morning Catch.

The below image shows that Capture credentials is marked correctly:

The HTML code is below for the landing page. The method is post.

Markdown was playing up with the HTML code: so please find it here:
http://pastebin.com/uq9d6X6J

Below image shows that credentials are not being captured:

I have cloned the VMX to OVA, perhaps this has affected the cloning of the landing page?

Haydz on 10 Jan 2017

I have the problem of not seeing the Submitted Data as well. Any idea what I need to do? The redirection works fine after submitting the data though.

DerekChia on 2 May 2017

I find that GoPhish seems to like the 'name' property to be defined in a form.

<form action="" method="post" name="form">
<label>Username:</label>
<input name="username" type="text"/>
<label>Password:</label>
<input name="password" type="password"/>
</form>

S0larflare on 2 May 2017

👍5 🎉2

@S0larflare's tip fixed the issue for me. Thanks!