New Ghost Phisher (Fake DNS, Fake HTTP e.t.c)

[savioboyz]

I like how you think

Thanks for the complement ;-)

[ondrovic]

Great work finally got around to testing this. I noticed when cloning a site it comes back with a lot of 404 errors. I will post a log file tomorrow for you.

[ondrovic]

here is the error log from trying to clone a website

50-90-40-153.res.bhn.net - - [01/May/2011 08:35:40] "GET / HTTP/1.1" 200 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:40] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:40] "GET /online/Home/css/chasehome-v2.css?language=en_US HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/supportFlashAd.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/Home/images/serch_button_home.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/Home/images/chseNewlogo.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/Home/images/enoll_region.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/Home/images/14643-freedom-cashback-572x150.jpg HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/jquery-1.4.2.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/jquery.commons-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/jquery.chase.ui.spinner-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/jquery.chase.framework-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/jquery.chase.ui.content-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:41] "GET /online/includes/javasript/jquery.chase.tag.doubleclick.ad-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/includes/javasript/popup.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/javascrip/cg_microsite_search.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/includes/javasript/copyright.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/javascrip/logon_home.js?refresh=041308_2 HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/javascrip/accessible.js?p=1234 HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/javascrip/chaseHomePage.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/loon_header_home.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/includes/image/defaultHomeOutageImage.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/16802_Protect_ad2.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/11018_sec_msg.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/suhead_pb.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/suhead_business.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/suhead_pl.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/suhead_i_n_i.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/13480_freedom_155x90.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] "GET /online/Home/images/9663_155x90_v1.jpg HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:42] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/images/suhead_tellme.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/images/arow_dblue_on_white.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/images/suhead_news.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/images/fdc_msg.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/images/ft_chasehouse.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/images/loon_button_home.gif HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/multimedi/143643-freedom-cashback-572x150-37511.swf HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/jquery.commons-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/jquery.chase.ui.spinner-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/jquery.chase.framework-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/jquery.chase.ui.content-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/jquery.chase.tag.doubleclick.ad-20101115.min.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/popup.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/Home/javascrip/cg_microsite_search.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] "GET /online/includes/javasript/copyright.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:43] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] "GET /online/Home/javascrip/logon_home.js?refresh=041308_2 HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] "GET /online/Home/javascrip/accessible.js?p=1234 HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] "GET /online/Home/javascrip/chaseHomePage.js HTTP/1.1" 404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] "GET /favicon.ico HTTP/1.1"404 -
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] code 404, message File not ound
50-90-40-153.res.bhn.net - - [01/May/2011 08:35:44] "GET /favicon.ico HTTP/1.1"404 -

[savioboyz]

Hi Ondrovic quiet some time .... Do you get similiar error on cloning other sites too?

[savioboyz]

AN IMPORTANT UPDATE

I have just included a wonderful contributer to the ghost project, and we have started execution of plans to make ghost a more robust,flexible and powerful application dedicated to client based attacks... The upcomming major release of ghost
promises a lot of wonderful and robust new features.

So if you are also willing to also help out in the project, you are welcomed.... For as i said earlier, the next release of ghost promises wonders

[ondrovic]

Seems like it doesn't handle multiple folders very well. Also can get favicon.ico from any site

[savioboyz]

Hi Ondrovic,
The clone website feature of ghost only gets the source code and does its manipulations on only the first page of the cloned website... it does not download any image of icons... it relies on the ALT DNS section of the program resolve those images url and other media stuffs to the victim,.. Together with other features, im currently working on a faster http server..

Thanks

[ondrovic]

cool looking forward to it :-)

[longjidin]

good job mate!!!!......fixing the bugs

[intertan]

any fix for the netbook screen size issue yet?

So I have a question since I am using a netbook so I haven't been able to try it out to much.

So I setup a fake page aka facebook, the victim loads it up types in his username/password then clicks log in. After that click what happens?

I am not expecting it to actually log in.