mirror of
https://github.com/trustedsec/social-engineer-toolkit
synced 2025-03-03 06:47:31 +00:00
fix sms error handling issue
This commit is contained in:
TrustedSec
parent
b0541ca7bf
commit
9362187d4b
3 changed files with 63 additions and 58 deletions
|
|
@ -1,3 +1,9 @@
|
|||
~~~~~~~~~~~~~~~~
|
||||
version 7.3.2
|
||||
~~~~~~~~~~~~~~~~
|
||||
|
||||
* fixed an issue if python-requests was not installed it would bomb the module and SET out
|
||||
|
||||
~~~~~~~~~~~~~~~~
|
||||
version 7.3.1
|
||||
~~~~~~~~~~~~~~~~
|
||||
|
|
|
|||
|
|
@ -1 +1 @@
|
|||
7.3.1
|
||||
7.3.2
|
||||
|
|
|
|||
113
src/sms/sms.py
113
src/sms/sms.py
|
|
@ -1,79 +1,78 @@
|
|||
#!/usr/bin/env python
|
||||
# coding=utf-8
|
||||
|
||||
from src.sms.protectedapi import send_sms
|
||||
|
||||
import src.core.setcore as core
|
||||
|
||||
try:
|
||||
import requests
|
||||
except ImportError:
|
||||
core.print_error("Looks like you dont have python-requests installed. "
|
||||
"Please install (apt-get install python-requests) and try again.")
|
||||
print("Press {return} to continue.")
|
||||
import sys
|
||||
|
||||
# Py2/3 compatibility
|
||||
# Python3 renamed raw_input to input
|
||||
try:
|
||||
input = raw_input
|
||||
except NameError:
|
||||
pass
|
||||
try: input = raw_input
|
||||
except NameError: pass
|
||||
|
||||
print("""\n ----- The Social-Engineer Toolkit (SET) SMS Spoofing Attack Vector -----\n""")
|
||||
print("This attack vector relies upon a third party service called www.spoofmytextmessage.com. "
|
||||
"This is a third party service outside of the control from the Social-Engineer Toolkit. "
|
||||
"The fine folks over at spoofmytextmessage.com have provided an undocumented API for us "
|
||||
"to use in order to allow SET to perform the SMS spoofing. You will need to visit "
|
||||
"https://www.spoofmytextmessage.com and sign up for an account. They example multiple "
|
||||
"payment methods such as PayPal, Bitcoin, and many more options. Once you purchase your "
|
||||
"plan that you want, you will need to remember your email address and password used for "
|
||||
"the account. SET will then handle the rest.\n")
|
||||
def _do_sms():
|
||||
print("""\n ----- The Social-Engineer Toolkit (SET) SMS Spoofing Attack Vector -----\n""")
|
||||
print("This attack vector relies upon a third party service called www.spoofmytextmessage.com. "
|
||||
"This is a third party service outside of the control from the Social-Engineer Toolkit. "
|
||||
"The fine folks over at spoofmytextmessage.com have provided an undocumented API for us "
|
||||
"to use in order to allow SET to perform the SMS spoofing. You will need to visit "
|
||||
"https://www.spoofmytextmessage.com and sign up for an account. They example multiple "
|
||||
"payment methods such as PayPal, Bitcoin, and many more options. Once you purchase your "
|
||||
"plan that you want, you will need to remember your email address and password used for "
|
||||
"the account. SET will then handle the rest.\n")
|
||||
|
||||
print("In order for this to work you must have an account over at spoofmytextmessage.com\n")
|
||||
print("Special thanks to Khalil @sehnaoui for testing out the service for me and finding "
|
||||
"spoofmytextmessage.com\n")
|
||||
print("In order for this to work you must have an account over at spoofmytextmessage.com\n")
|
||||
print("Special thanks to Khalil @sehnaoui for testing out the service for me and finding "
|
||||
"spoofmytextmessage.com\n")
|
||||
|
||||
core.print_error("DISCLAIMER: By submitting yes, you understand that you accept all terms and "
|
||||
"services from spoofmytextmessage.com and you are fully aware of your countries "
|
||||
"legal stance on SMS spoofing prior to performing any of these. By accepting yes "
|
||||
"you fully acknowledge these terms and will not use them for unlawful purposes.")
|
||||
core.print_error("DISCLAIMER: By submitting yes, you understand that you accept all terms and "
|
||||
"services from spoofmytextmessage.com and you are fully aware of your countries "
|
||||
"legal stance on SMS spoofing prior to performing any of these. By accepting yes "
|
||||
"you fully acknowledge these terms and will not use them for unlawful purposes.")
|
||||
|
||||
message = input("\nDo you accept these terms (yes or no): ")
|
||||
message = input("\nDo you accept these terms (yes or no): ")
|
||||
|
||||
if message == "yes":
|
||||
core.print_status("Okay! Moving on - SET needs some information from you in order to spoof the message.")
|
||||
email = input(core.setprompt(["7"], "Enter your email address for the spoofmytextmessage.com account"))
|
||||
pw = input(core.setprompt(["7"], "Enter your password for the spoofmytextmessage.com account"))
|
||||
core.print_status("The next section requires a country code, this is the code you would use to dial "
|
||||
"to the specific country, for example if I was sending a message to 555-555-5555 to "
|
||||
"the United States (or from) you would enter +1 below.")
|
||||
if message == "yes":
|
||||
core.print_status("Okay! Moving on - SET needs some information from you in order to spoof the message.")
|
||||
email = input(core.setprompt(["7"], "Enter your email address for the spoofmytextmessage.com account"))
|
||||
pw = input(core.setprompt(["7"], "Enter your password for the spoofmytextmessage.com account"))
|
||||
core.print_status("The next section requires a country code, this is the code you would use to dial "
|
||||
"to the specific country, for example if I was sending a message to 555-555-5555 to "
|
||||
"the United States (or from) you would enter +1 below.")
|
||||
|
||||
tocountry = input(core.setprompt(["7"], "Enter the country code for the number you are sending TO "
|
||||
"(for example U.S would be '+1')[+1]"))
|
||||
if tocountry == "":
|
||||
tocountry = "+1"
|
||||
tocountry = input(core.setprompt(["7"], "Enter the country code for the number you are sending TO "
|
||||
"(for example U.S would be '+1')[+1]"))
|
||||
if tocountry == "":
|
||||
tocountry = "+1"
|
||||
|
||||
fromcountry = input(core.setprompt(["7"], "Enter the country code for the number you are sending FROM "
|
||||
fromcountry = input(core.setprompt(["7"], "Enter the country code for the number you are sending FROM "
|
||||
"(for example U.S. would be '+1')[+1]"))
|
||||
if fromcountry == "":
|
||||
fromcountry = "+1"
|
||||
if fromcountry == "":
|
||||
fromcountry = "+1"
|
||||
|
||||
tonumber = input(core.setprompt(["7"], "Enter the number to send the SMS TO - be sure to include "
|
||||
tonumber = input(core.setprompt(["7"], "Enter the number to send the SMS TO - be sure to include "
|
||||
"country code (example: +15551234567)"))
|
||||
|
||||
fromnumber = input(core.setprompt(["7"], "Enter the number you want to come FROM - be sure to include "
|
||||
fromnumber = input(core.setprompt(["7"], "Enter the number you want to come FROM - be sure to include "
|
||||
"country code (example: +15551234567)"))
|
||||
|
||||
message = input(core.setprompt(["7"], "Enter the message you want to send via the text message"))
|
||||
message = input(core.setprompt(["7"], "Enter the message you want to send via the text message"))
|
||||
|
||||
# note that the function for this is in a compiled python file with no source -
|
||||
# this was done at the request of the third party we use since the API is not documented.
|
||||
# I hand wrote the code and can validate its authenticity - it imports python requests
|
||||
# and json and uses that to interact with the API. From a security standpoint if you are
|
||||
# uncomfortable using this - feel free to ping me and I can walk you through what I do
|
||||
# without giving away the API from the third party.
|
||||
# note that the function for this is in a compiled python file with no source -
|
||||
# this was done at the request of the third party we use since the API is not documented.
|
||||
# I hand wrote the code and can validate its authenticity - it imports python requests
|
||||
# and json and uses that to interact with the API. From a security standpoint if you are
|
||||
# uncomfortable using this - feel free to ping me and I can walk you through what I do
|
||||
# without giving away the API from the third party.
|
||||
from src.sms.protectedapi import send_sms
|
||||
send_sms(email, pw, tocountry, fromcountry, fromnumber, tonumber, message)
|
||||
|
||||
send_sms(email, pw, tocountry, fromcountry, fromnumber, tonumber, message)
|
||||
else:
|
||||
core.print_status("Okay! Exiting out of the Social-Engineer Toolkit SMS Spoofing Attack Vector...")
|
||||
|
||||
else:
|
||||
core.print_status("Okay! Exiting out of the Social-Engineer Toolkit SMS Spoofing Attack Vector...")
|
||||
try:
|
||||
import requests
|
||||
_do_sms()
|
||||
|
||||
except ImportError:
|
||||
core.print_error("Looks like you dont have python-requests installed. "
|
||||
"Please install (apt-get install python-requests) and try again.")
|
||||
input("Press {return} to continue.")
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue