diff --git a/README.md b/README.md index 71f060f..67317dd 100644 --- a/README.md +++ b/README.md @@ -11,6 +11,7 @@ Availible plugins: - Spoof - Redirect traffic using ARP Spoofing, ICMP Redirects or DHCP Spoofing and modify DNS queries - BeEFAutorun - Autoruns BeEF modules based on clients OS or browser type - AppCachePoison - Perform app cache poison attacks +- AirPwn - Monitor traffic on an 802.11 network and respond with arbitrary content as configured - BrowserProfiler - Attempts to enumerate all browser plugins of connected clients - CacheKill - Kills page caching by modifying headers - FilePwn - Backdoor executables being sent over http using bdfactory @@ -25,6 +26,8 @@ So far the most significant changes have been: - Integrated SSLstrip+ (https://github.com/LeonardoNve/sslstrip2) by Leonardo Nve to partially bypass HSTS as demonstrated at BlackHat Asia 2014 +- Addition of the AirPwn plugin (Python port of the original project) + - Spoof plugin now supports ICMP, ARP and DHCP spoofing along with DNS tampering (DNS tampering code was stolen from https://github.com/DanMcInerney/dnsspoof/) diff --git a/config_files/airpwn.cfg b/config_files/airpwn.cfg new file mode 100644 index 0000000..5a23602 --- /dev/null +++ b/config_files/airpwn.cfg @@ -0,0 +1,9 @@ +#Example config for the AirPwn plugin + +[site_hijack] +match = ^(GET|POST).* +response = ./config_files/airpwn_templates/site_hijack + +#[puppy_jpg] +#match = ^GET [^ ]+\.(?i:jpg|jpeg|gif|png) +#response = ./config_files/airpwn_templates/puppy_jpg \ No newline at end of file diff --git a/config_files/airpwn_templates/README b/config_files/airpwn_templates/README new file mode 100644 index 0000000..9276f29 --- /dev/null +++ b/config_files/airpwn_templates/README @@ -0,0 +1,3 @@ +Sample content used by the configurations in the conf/ directory. See +the README there for more information. + diff --git a/config_files/airpwn_templates/airpwn_cssbg b/config_files/airpwn_templates/airpwn_cssbg new file mode 100644 index 0000000..cf60a95 --- /dev/null +++ b/config_files/airpwn_templates/airpwn_cssbg @@ -0,0 +1,10 @@ +HTTP/1.1 200 OK +Content-type: text/css +Content-length: 103 + +body { + background-color: red; + background-image: url(/airpwnbg.jpg); + background-repeat: repeat; +} + \ No newline at end of file diff --git a/config_files/airpwn_templates/airpwned_png b/config_files/airpwn_templates/airpwned_png new file mode 100644 index 0000000..c4bd094 Binary files /dev/null and b/config_files/airpwn_templates/airpwned_png differ diff --git a/config_files/airpwn_templates/ftp_resp b/config_files/airpwn_templates/ftp_resp new file mode 100644 index 0000000..76bfaac --- /dev/null +++ b/config_files/airpwn_templates/ftp_resp @@ -0,0 +1,2 @@ +331 FTP IS FUN!!!! ENJOY YOUR DATA!!! + diff --git a/config_files/airpwn_templates/greet_html b/config_files/airpwn_templates/greet_html new file mode 100644 index 0000000..4091401 --- /dev/null +++ b/config_files/airpwn_templates/greet_html @@ -0,0 +1,11 @@ +HTTP/1.1 200 OK +Connection: close +Content-Type: text/html + +HELLO DEFCON! + + +Hello Defcon! Your wireless network is delicious! + + +

diff --git a/config_files/airpwn_templates/js_html b/config_files/airpwn_templates/js_html new file mode 100644 index 0000000..ffd9cb8 --- /dev/null +++ b/config_files/airpwn_templates/js_html @@ -0,0 +1,13 @@ +HTTP/1.1 200 OK +Connection: close +Content-Type: text/html + +pwned + + diff --git a/config_files/airpwn_templates/puppy_jpg b/config_files/airpwn_templates/puppy_jpg new file mode 100644 index 0000000..e84fc7e Binary files /dev/null and b/config_files/airpwn_templates/puppy_jpg differ diff --git a/config_files/airpwn_templates/site_hijack b/config_files/airpwn_templates/site_hijack new file mode 100644 index 0000000..3e5f6ff --- /dev/null +++ b/config_files/airpwn_templates/site_hijack @@ -0,0 +1,15 @@ +HTTP/1.1 200 OK +Connection: close +Content-Type: text/html +Content-Length: 250 + + + hugs + + +

+ BYE BYE! + + +