Diego Pérez

Hi!
No, it seems you have installed a different Pyinstaller version, I used the one that is installed by default with zlogger.
So take a look at the screenshot I sent, specially lines 399 and 402, look for those lines in your utils.py and modified it as I mentioned.

Thanks!
Bug-Bounty.com Team

Hi!
Sorry, videos can’t be downloaded.

Greetings!
Diego

Hi!
Running the installation script should’ve installed the proper versions, maybe a different tool has already installed a different pyinstaller version.
Can you share a screenshot with the command used to create the keylogger and the top of the result?

Thanks!
Diego

Hi!
Well, I gave you a solution to veil that doesn’t need an extra course, it seems you didn’t read the link I sent about using msfvenom. I only told you about Social Engineering course because you want to use empire and it is covered in such course. The course can be properly run in an intel-based macbook, it’s not our fault that some developers doesn’t create tools for the M1/M2 chips.

Greetings!
Diego

Hi!
If you have run an upgrade then most of the custom changes made by Zaid have been undone, I suggest to remove that kali and import a fresh custom kali. Avoid doing any upgrade on it. Then try the attack again against the windows virtual machine, you can also try to use firefox in windows virtual machine.

Yes, mitmproxy is a different tool than bettercap and burpsuite.

Greetings!
Diego

Hi!
Basically there are 2 challenges:
Websites that use normal https like zsecurity.org, stackoverflow.com ….etc you should be able to bypass all of these even if accessed directly.Websites that use HSTS like facebook and twitter, these websites will only load over HTTPS if accessed directly because the browser has a list of famous websites that use HSTS, therefore it will only load them over https, the only way around this is to use the custom hstshijack caplet that Zaid provided, this will only work if the user searches for the website using a search engine that does not use HSTS, for example if they use the local google domain such as google.ie to search for facebook / twitter …etc in this case the script will replace the .com at the end with .corn bypassing the list of famous websites that the browser has and allowing us to downgrade these websites to http.

So clear browser’s cache for All Times or Everything on victim’s machine, then run the attack and enter linkedin.com in the browser’s address bar, just like that, without prepending https://

Let me know how it goes!
Diego

Hi!
That github repo is outdated. Use this one instead https://github.com/BC-SECURITY/Empire. It also includes the installation instructions.

Greetings!
Diego