github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-08-19 04:59:33 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Updated Readme

Browse source
This commit is contained in:
byt3bl33d3r 2015-05-11 03:58:52 +02:00
commit aefd0cea3b
1 changed files with 18 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

27
README.md
View file

@ -7,22 +7,26 @@ Quick tutorials, examples and dev updates at http://sign0f4.blogspot.it
This tool is based on [sergio-proxy](https://github.com/supernothing/sergio-proxy) and is an attempt to revive and update the project. This tool is based on [sergio-proxy](https://github.com/supernothing/sergio-proxy) and is an attempt to revive and update the project.
Contact me at:
- Twitter: @byt3bl33d3r
- IRC on Freenode: #MITMf
- Email: byt3bl33d3r@gmail.com
**Before submitting issues please read the [FAQ](#faq) and the appropriate [section](#submitting-issues).** **Before submitting issues please read the [FAQ](#faq) and the appropriate [section](#submitting-issues).**
Availible plugins Availible plugins
================= =================
- Responder - LLMNR, NBT-NS and MDNS poisoner - Responder - LLMNR, NBT-NS and MDNS poisoner
- SSLstrip+ - Partially bypass HSTS - SSLstrip+ - Partially bypass HSTS
- Spoof - Redirect traffic using ARP Spoofing, ICMP Redirects or DHCP Spoofing and modify DNS queries - Spoof - Redirect traffic using ARP Spoofing, ICMP Redirects or DHCP Spoofing
- Sniffer - Sniffs for various protocol login and auth attempts
- BeEFAutorun - Autoruns BeEF modules based on clients OS or browser type - BeEFAutorun - Autoruns BeEF modules based on clients OS or browser type
- AppCachePoison - Perform app cache poison attacks - AppCachePoison - Perform App cache poisoning attacks
- SessionHijacking - Performs session hijacking attacks, and stores cookies in a firefox profile - Ferret-NG - Transperently hijacks sessions
- BrowserProfiler - Attempts to enumerate all browser plugins of connected clients - BrowserProfiler - Attempts to enumerate all browser plugins of connected clients
- CacheKill - Kills page caching by modifying headers - CacheKill - Kills page caching by modifying headers
- FilePwn - Backdoor executables being sent over http using Backdoor Factory and BDFProxy - FilePwn - Backdoor executables being sent over http using the Backdoor Factory and BDFProxy
- Inject - Inject arbitrary content into HTML content - Inject - Inject arbitrary content into HTML content
- JavaPwn - Performs drive-by attacks on clients with out-of-date java browser plugins - BrowserPwn - Performs drive-by attacks on clients with out-of-date browser plugins
- jskeylogger - Injects a javascript keylogger into clients webpages - jskeylogger - Injects a javascript keylogger into clients webpages
- Replace - Replace arbitary content in HTML content - Replace - Replace arbitary content in HTML content
- SMBAuth - Evoke SMB challenge-response auth attempts - SMBAuth - Evoke SMB challenge-response auth attempts
@ -31,9 +35,11 @@ Availible plugins
Changelog Changelog
========= =========
- Addition of a fully functional SMB server using the Impacket library
- Addition of [DNSChef](https://github.com/iphelix/dnschef), the framework is now a IPv4/IPv6 (TCP & UDP) DNS server ! Supported queries are: 'A', 'AAAA', 'MX', 'PTR', 'NS', 'CNAME', 'TXT', 'SOA', 'NAPTR', 'SRV', 'DNSKEY' and 'RRSIG' - Addition of [DNSChef](https://github.com/iphelix/dnschef), the framework is now a IPv4/IPv6 (TCP & UDP) DNS server ! Supported queries are: 'A', 'AAAA', 'MX', 'PTR', 'NS', 'CNAME', 'TXT', 'SOA', 'NAPTR', 'SRV', 'DNSKEY' and 'RRSIG'
- Addition of the Sniffer plugin which integrates [Net-Creds](https://github.com/DanMcInerney/net-creds) currently supported protocols are: - Integrated [Net-Creds](https://github.com/DanMcInerney/net-creds) currently supported protocols are:
FTP, IRC, POP, IMAP, Telnet, SMTP, SNMP (community strings), NTLMv1/v2 (all supported protocols like HTTP, SMB, LDAP etc..) and Kerberos FTP, IRC, POP, IMAP, Telnet, SMTP, SNMP (community strings), NTLMv1/v2 (all supported protocols like HTTP, SMB, LDAP etc..) and Kerberos
- Integrated [Responder](https://github.com/SpiderLabs/Responder) to poison LLMNR, NBT-NS and MDNS, and act as a WPAD rogue server. - Integrated [Responder](https://github.com/SpiderLabs/Responder) to poison LLMNR, NBT-NS and MDNS, and act as a WPAD rogue server.
@ -63,7 +69,7 @@ If MITMf is not in your distros repo or you just want the latest version:
- run the ```setup.sh``` script - run the ```setup.sh``` script
- run the command ```pip install -r requirements.txt``` to install all python dependencies - run the command ```pip install -r requirements.txt``` to install all python dependencies
On Kali Linux, if you get an error while installing the pypcap package or when starting MITMf you see: ```ImportError: no module named pcap``` run ```apt-get install python-pypcap``` to fix it. On Kali Linux, if you get an error while installing the ```pypcap``` package or when starting MITMf you see: ```ImportError: no module named pcap``` run ```apt-get install python-pypcap``` to fix it.
How to install on Kali How to install on Kali
====================== ======================
@ -86,7 +92,10 @@ Also remember: Github markdown is your friend!
FAQ FAQ
=== ===
- **Is Windows supported?** - **Is Windows supported?**
- No, I'm not masochistic and I actually want things to work. - No
- **Is OSX supported?**
- Currently no, although with some tweaking (which I'll probably get around to in the near future) it should be able to run perfectly on OSX
- **I can't install package X because of an error!** - **I can't install package X because of an error!**
- Try installing the module via ```pip``` or your distros package manager. This *isn't* a problem with MITMf. - Try installing the module via ```pip``` or your distros package manager. This *isn't* a problem with MITMf.