Commit graph

196 commits

Author SHA1 Message Date
byt3bl33d3r
067cc4e337
Merge pull request #472 from rememberYou/fix/display
Fix indentation for arpmode
2018-05-04 11:19:17 -06:00
Terencio Agozzino
2f802e71c7 Add refactoring of file reading 2018-05-03 20:28:54 +02:00
Terencio Agozzino
e44551bd54 Fix indentation for arpmode 2018-05-03 19:51:57 +02:00
byt3bl33d3r
0e81e40388 Merge pull request #254 from onedv/master
Captive portal redirecting using 302
2016-12-12 23:39:55 -07:00
byt3bl33d3r
2dc1dd4f12 Hold on to your butts cause here we go.
This should resolve:
* Issue #307
* Issue #309
* Issue #302
* Issue #294

Apperently, Twisted made some fairly heavy API changes in their 16.x
release which kinda fucked all the plugins up.
2016-06-08 23:39:58 -06:00
HAMIDx9
f8293c38c9 Fix returning data, check mime to avoid heavy chardet process we are not interested in other mimes. 2016-01-29 01:42:54 +03:30
Oliver Nettinger
822b87e77c Captive Portal related changes
Made options exclusive
Added OSX files to .gitignore
Update README with plugin
2016-01-19 07:52:23 +01:00
Oliver Nettinger
681be498a9 Added captive portal plugin 2016-01-14 11:11:21 +01:00
byt3bl33d3r
640f02a8a3 Added imagerandomizer plugin 2015-11-03 17:57:41 -07:00
byt3bl33d3r
22a43df4f8 DNS server now outputs all queries to seperate log file
Fixed a bug where the SSLStrip proxy wouldn't allow caching if the AppCache poison plugin is enabled
HTTP and SMB servers now listen on all interfaces
2015-09-06 12:47:07 +02:00
byt3bl33d3r
e54b90aa7b fixes #182, iptables rules weren't being set 2015-09-02 12:02:56 +02:00
byt3bl33d3r
986b2b851f Fixed bug where Net-Creds wouldn't parse URL's and HTTP data when reading from pcap
Active packet filtering engine and proxy + servers are now mutually exclusive , you can only start one of them (iptable conflicts)
2015-09-01 14:15:21 +02:00
HAMIDx9
752fafaf4b Add unicode support for jskeylogger plugin, fixes #56 2015-08-24 04:52:33 +04:30
byt3bl33d3r
27c28e512e Inject.py now tries to detect encoding before parsing HTML with BeautifulSoup 2015-08-23 19:42:52 +02:00
HAMIDx9
7a5186750f Fix encoding in Inject plugin by using manual encoding detection, BS fails in some cases 2015-08-23 20:57:18 +04:30
byt3bl33d3r
24070afbd0 Removed beefautoplugin since it's pretty useless now with BeEF's ARE engine
removed check to enable IP forwarding using sysctl
2015-08-23 01:33:16 +02:00
byt3bl33d3r
885ecc3a4e replaced watchdog with pyinotify 2015-08-22 16:51:50 +02:00
byt3bl33d3r
1a5c7c03b7 Updated Filepwn plugin to the latest BDFactory & BDFProxy version 2015-08-12 16:30:34 +02:00
byt3bl33d3r
1a50f000c1 added an option to parse creds from a pcap using NetCreds, removed mitmflib as a dep (was causing problems for travis) 2015-08-11 17:11:44 +02:00
byt3bl33d3r
e22276477b fixes #150
Forgot to start up the Browser server.. oops!
2015-08-05 14:32:22 +02:00
byt3bl33d3r
772ef9ab39 responder code is now up to date with the lastest version
logging is going to have to get cleaned up, but that's a minor issue
re-implemented the function to add endpoints to the http server
added an option to manually specify the gateways mac in the Spoofer plugin
2015-08-05 13:31:04 +02:00
byt3bl33d3r
052c86b242 fixes #146 2015-08-03 05:38:02 +02:00
byt3bl33d3r
fa59ca466b third pass:
- All servers back online
- modified logging
2015-08-03 05:34:46 +02:00
byt3bl33d3r
8b55a2e3f5 Second pass:
MDNS, LLMNR and NBTNS poisoners are back online
HTTP server now functional
2015-08-02 22:53:16 +02:00
byt3bl33d3r
fd9b79c617 first pass at refactoring:
directory structure has been simplified by grouping all the poisoners and servers in one folder
impacket smb server has been replaced with responder's
flask http server has beem replaced with responder's
modified config file to support new changes
2015-08-02 21:15:10 +02:00
byt3bl33d3r
8270f337ad DHCP poisoner now takes into account the requested IP of clients WPAD server address
Specifying interface is now optional
2015-07-30 16:56:11 +02:00
byt3bl33d3r
87bca5e7dd Added new beefapi.py , modified beefautorun plugin: now handles hook injection + ARE autoloading 2015-07-30 00:54:59 +02:00
byt3bl33d3r
7ec9f7b395 This commit adds active packet filtering/modification to the framework (replicates etterfilter functionality)
by using netfilterqueue, you can pass a filter using the new -F option, (will be adding an example later)
additionaly removed some deprecated attributes and the --manual-iptables option
2015-07-27 20:44:23 +02:00
byt3bl33d3r
f0fce41c88 App-Cache poison and BrowserSniper plugins have been refactored, added supported python version tags in README 2015-07-26 14:03:56 +02:00
byt3bl33d3r
f4df9971f9 added CHANGELOG.md, CONTRIBUTORS.md and modded README.md 2015-07-25 03:37:45 +02:00
byt3bl33d3r
ba14ed8687 This commit refactors ARP and DHCP poisoning:
DHCP poisoning now works on Windows, additionaly it's been optimized for performance improvements
ARP poisoning has been optimized with and internal cache and some algo improvements

cve-details-parser.py has been added to the utils/ directory to help adding exploits to the BrowserSniper config file

I'm currently working on adding to the filepwn plugin all of the missing options that bdfproxy stand-alone has
2015-07-25 02:49:41 +02:00
byt3bl33d3r
5e2f30fb89 This is a vewwwy big commit
- The inject plugin now uses beautifulsoup4 to actually parse HTML and add content to it as supposed to using regexes
- The logging of the whole framework has been compleatly overhauled
- plugindetect.js now includes os.js from the metasploit framework for os and browser detection, let's us fingerprint hosts even if UA is lying!
- New plugin HTA Drive-by has been added, prompts the user for a plugin update and makes them download an hta app which contains a powershell payload
- the API of the plugins has been simplified
- Improvements and error handling to user-agent parsing
- Some misc bugfixes
2015-07-18 20:14:07 +02:00
byt3bl33d3r
ff0ada2a39 Revamped logging , plugins will be re-added later once refactored 2015-07-14 17:40:19 +02:00
byt3bl33d3r
fb0e8a3762 fixed #126 2015-06-20 14:16:29 +02:00
byt3bl33d3r
951937bac4 commented out unfinished option in Inject.py 2015-06-15 00:27:09 +02:00
byt3bl33d3r
bb8ee46b82 added kali setup script and updated readme 2015-06-15 00:18:55 +02:00
byt3bl33d3r
b73ac99de3 re-added scapy, changed imports 2015-06-11 22:27:31 +02:00
byt3bl33d3r
aa246130e2 updated requirements.txt, changed imports to mitmflib 2015-06-11 22:05:22 +02:00
byt3bl33d3r
e3aa8ba617 fixes #117 2015-06-08 13:38:45 +02:00
byt3bl33d3r
96d1078d42 Merge branch 'webserver' 2015-06-08 04:30:11 +02:00
byt3bl33d3r
316246e3cc Re-Wrote Beef-api, refactored the beefAutorun plugin as per #113, this also should address any problems left over from #106 2015-06-08 04:13:55 +02:00
byt3bl33d3r
d56ce5447e This commit should resolve issues #106 and #109
Issue #106 was caused by a 'None' value being returned when BeEF was unable to detect the hooked browser's OS

Issue #109 was probably caused by locked resources when send() and sendp() where being called, adding in sleep() seems to have resolved the issue (at least on my machine)
2015-06-06 14:20:54 +02:00
byt3bl33d3r
ffdb4ff55c fixed DHCP and ICMP spoofing calling wrong vars 2015-06-05 21:06:20 +02:00
byt3bl33d3r
b0fa2e010d fixed #108 2015-06-03 01:44:12 +02:00
byt3bl33d3r
c2354b9b63 Merged the SMBTrap plugin to master and relative code changes 2015-06-02 23:54:33 +02:00
byt3bl33d3r
4de7d3e67e fixed a wrong var 2015-06-02 18:53:30 +02:00
byt3bl33d3r
14580f1589 second implementation of the HTTP server, you can now define shares for the SMB server in the config file, added an option to switch between the normal SMB server and the Karma version.
removed some useless code (left over from the responder plugin), serverResponseStatus hook now returns a dict (tuple was causing errors)
2015-05-30 15:00:41 +02:00
byt3bl33d3r
87cb98b6ac fixes 98 2015-05-28 13:49:40 +02:00
byt3bl33d3r
f86457b300 fixes #96 2015-05-27 22:02:41 +02:00
byt3bl33d3r
e985d42a8a The new changes caused an exception when unpacking the tuple, fixed it 2015-05-23 00:37:08 +02:00