github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-08-20 21:43:28 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

App-Cache poison and BrowserSniper plugins have been refactored, added supported python version tags in README

Browse source
This commit is contained in:
byt3bl33d3r 2015-07-26 14:03:56 +02:00
commit f0fce41c88
16 changed files with 96 additions and 121 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/app_cache_poison_templates/default.append
View file

@ -34,5 +34,5 @@
</div>
<div style="padding: 1em;border:1px solid red;margin:1em">
<h1>AppCache Poison works!</h1>
<p><code>%%tamper_url%%</code> page is spoofed with <a href="https://github.com/koto/sslstrip">AppCache Poison</a> by <a href="http://blog.kotowicz.net">Krzysztof Kotowicz</a>, but this is just a default content. To replace it, create appropriate files in your templates directory and add your content there.</p>
<p>This page is spoofed with <a href="https://github.com/koto/sslstrip">AppCache Poison</a> by <a href="http://blog.kotowicz.net">Krzysztof Kotowicz</a>, but this is just a default content. To replace it, create appropriate files in your templates directory and add your content there.</p>
</div>

2
config/app_cache_poison_templates/script.append
View file

@ -1,2 +1,2 @@
;console.log('AppCache Poison was here. Google Analytics FTW');
;alert('AppCache Poison was here. Google Analytics FTW');

0
config/hta_driveby/Flash.hta → config/hta_driveby/flash_setup.hta
View file

17
config/mitmf.conf
View file

@ -142,7 +142,7 @@
# Here you can specify the client to hijack sessions from
#
Client = '192.168.20.126'
Client = '192.168.1.26'
[SSLstrip+]
@ -248,18 +248,9 @@
templates=test # which templates to use for spoofing content?
skip_in_mass_poison=1
[[gmail]]
#use absolute URLs - system tracks 30x redirects, so you can put any URL that belongs to the redirection loop here
tamper_url=http://mail.google.com/mail/
# manifest has to be of last domain in redirect loop
manifest_url=http://mail.google.com/robots.txt
templates=default # could be omitted
[[google]]
tamper_url = http://www.google.com/
tamper_url_match = http://www.google.com\.*.
tamper_url = http://www.google.com
manifest_url = http://www.google.com/robots.txt
[[facebook]]
@ -269,7 +260,7 @@
[[twitter]]
tamper_url=http://twitter.com/
#tamper_url_match=^http://(www\.)?twitter\.com/$
tamper_url_match=^http://(www\.)?twitter\.com/$
manifest_url=http://twitter.com/robots.txt
[[html5rocks]]