Initial working PoC for the Ferret-NG plugin that will replace the SessionHijacker plugin: it will capture cookies and trasparently feed them to the proxy it starts up on port 10010 (by default), this way we just have to connect to the proxy, browse to the same website as the victim and we will automatically hijack their session! \o/

The way MITMf hooks SSLstrip's functions has been modified to improve plugin code readability, additionally corrected some useless function hooks that were placed in early framework realeases and never removed.

Replace plugin has been given it's own section in the config file

currently the BeedAutorun and Javapwn plugins have to be cleaned up...

BrowserProfile plugin's Pinlady code has been updated to the latest version (v0.9.0) and will now detect Flash player's version

Javapwn plugin will be renamed to BrowserPwn and will support Flash exploits too , as supposed to only Java exploits

Since we now have a built in SMB server, removed options to specify a host in the SMBauth plugin

Tweaked the output of some plugins

plugins/plugin.py

@@ -11,7 +11,6 @@ class Plugin(ConfigWatcher, object):
     name       = "Generic plugin"
     optname    = "generic"
     desc       = ""
-    implements = []
     has_opts   = False
 
     def initialize(self, options):
@@ -19,31 +18,41 @@ class Plugin(ConfigWatcher, object):
         self.options = options
 
     def startThread(self, options):
-        '''Anything that will subclass this function will be a thread'''
+        '''Anything that will subclass this function will be a thread, passed the options namespace'''
         return
 
-    def add_options(options):
-        '''Add your options to the options parser'''
-        raise NotImplementedError
+    def clientRequest(self, request):
+        '''
+            Handles all outgoing requests, hooks connectionMade()
+            request object has the following attributes:
 
-    def handleHeader(self, request, key, value):
-        '''Handles all response headers'''
-        raise NotImplementedError
-
-    def connectionMade(self, request):
-        '''Handles outgoing request'''
-        raise NotImplementedError
-
-    def pluginReactor(self, strippingFactory):
-        '''This sets up another instance of the reactor on a diffrent port'''
+            request.headers => headers in dict format
+            request.commad  => HTTP method
+            request.post    => POST data
+            request.uri     => full URL
+            request.path    => path
+        '''
         pass
 
-    def handleResponse(self, request, data):
+    def serverHeaders(self, response, request):
         '''
-            Handles all non-image responses by default. See Upsidedownternet
-            for how to get images   
+            Handles all response headers, hooks handleEndHeaders()
         '''
-        raise NotImplementedError
+        pass
+
+    def serverResponse(self, response, request, data):
+        '''
+            Handles all non-image responses by default, hooks handleResponse() (See Upsidedownternet for how to get images)  
+        '''
+        return {'response': response, 'request':request, 'data': data}
+
+    def pluginOptions(self, options):
+        '''Add your options to the options parser'''
+        pass
+
+    def pluginReactor(self, strippingFactory):
+        '''This sets up another instance of the reactor on a diffrent port, passed the default factory'''
+        pass
 
     def finish(self):
         '''This will be called when shutting down'''