Comments (9)
Ok I will fix it ASAP
from cr3dov3r.
Second attempt:
[+] Testing websites with one form (14)!
-[ Vimeo ] Login successful !
-[ Ask.fm ] Login unsuccessful!
- Dropbox form data is invalid! please report to us!
-[ Github ] Login unsuccessful!
-[ Reddit ] Login unsuccessful!
-[ StackOF ] Login unsuccessful!
-[ Twitter ] Login unsuccessful!
-[ Bitbucket ] Login successful !
-[ Ebay.com ] Login unsuccessful!
-[ Facebook ] Login unsuccessful!
-[ FourSquare ] Login unsuccessful!
-[ Linkedin ] Login unsuccessful!
-[ Mediafire ] Login successful !
-[ Wikipedia ] Login unsuccessful!
[+] Testing websites with two forms (2)!
-[ Google ] Login unsuccessful!
-[ Yahoo ] Email not registered!
from cr3dov3r.
Same problem
from cr3dov3r.
@D4Vinci thanks
from cr3dov3r.
In addition to the false positive that I came here to report, if you don't enter any password (because no breach results were found) then it not only reports a false positive for login to Vimeo but it also returns this error:
[+] Testing websites with one form (14)!
-[ Vimeo ] Login successful !
-[ Ask.fm ] Login unsuccessful!
Traceback (most recent call last):
File "./Cr3d0v3r.py", line 123, in
main()
File "./Cr3d0v3r.py", line 115, in main
print( login( wd ,dic ,email ,pwd ) )
File "./Cr3d0v3r.py", line 53, in login
browser.select_form(form)
File "/usr/local/lib/python3.6/dist-packages/mechanicalsoup/stateful_browser.py", line 170, in select_form
found_forms = self.__current_page.select(selector, limit=nr + 1)
AttributeError: 'NoneType' object has no attribute 'select'
Let me know if I should report this as a separate issue. The application should be able to fail gracefully if no password is entered.
from cr3dov3r.
updated to version 0.1.1 released yesterday and it won't crash
from cr3dov3r.
I used a random password and here are the results!
[+] Checking email in public leaks...
Results found : 1
---------------------------------------
Name of leak => Dropbox
Date of leakage => 2012-07-14T00:00:00+00:00
Details => https://hacked-emails.com/leak/anon-dropbox68m2012txt
Please enter the password=>
[+] Testing websites with one form (14)!
-[ Vimeo ] Login successful !
-[ Ask.fm ] Login unsuccessful!
-[ Dropbox ] Login successful !
-[ Github ] Login unsuccessful!
-[ Reddit ] Login unsuccessful!
-[ StackOF ] Login unsuccessful!
-[ Twitter ] Login unsuccessful!
-[ Bitbucket ] Login successful !
-[ Ebay.com ] Login unsuccessful!
-[ Facebook ] Login unsuccessful!
-[ FourSquare ] Login unsuccessful!
-[ Linkedin ] Login unsuccessful!
-[ Mediafire ] Login successful !
-[ Wikipedia ] Login unsuccessful!
[+] Testing websites with two forms (2)!
-[ Google ] Login unsuccessful!
Traceback (most recent call last):
File "Cr3d0v3r.py", line 123, in <module>
main()
File "Cr3d0v3r.py", line 120, in main
print( custom_login( wd ,dic ,email ,pwd ) )
File "Cr3d0v3r.py", line 69, in custom_login
browser.select_form(form2)
File "/usr/local/lib/python3.5/dist-packages/mechanicalsoup/stateful_browser.py", line 170, in select_form
found_forms = self.__current_page.select(selector, limit=nr + 1)
File "/usr/lib/python3/dist-packages/bs4/element.py", line 1426, in select
'Unsupported or invalid CSS selector: "%s"' % token)
ValueError: Unsupported or invalid CSS selector: "form[class="pure-form"
from cr3dov3r.
Yeah its just false positives I usually get them more at Mediafire, Linkedin BItbucket and Vimeo
but everything else is fine I dont get those errors that are commented in here I was trying to add new websites but can seem to add them correctly
from cr3dov3r.
Released Version 0.2 check it out and please reopen the issue if the problem continues 😄
from cr3dov3r.
Related Issues (20)
- Newline error HOT 3
- UnicodeDecodeError HOT 2
- [+] Plaintext passwords found! Error HOT 5
- Upgrade HOT 1
- Would be nice if a Ctrl+C (and other aborts) would leave the console in a nice state HOT 2
- mall list
- Tool shows login successful if the website asked for google captcha HOT 4
- Unicode Crash - Windows HOT 2
- Can't reach internet! altrough im on wifi
- banners. ubuntu HOT 1
- linkedin question?
- ghostproject.fr/search.php query for leaked paswords is now broken HOT 2
- 503 Response in ispwned.grab_password() HOT 3
- 'encoding' is an invalid keyword HOT 1
- GhostProject can no longer be used :( HOT 1
- Tool didn't find plain text password HOT 2
- Feature request: automation HOT 1
- [ Google ] Login successful! Always. HOT 3
- error
- version of the API has been discontinued, please use V3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cr3dov3r.