Commit graph

6 commits

Author SHA1 Message Date
byt3bl33d3r
2dc1dd4f12 Hold on to your butts cause here we go.
This should resolve:
* Issue #307
* Issue #309
* Issue #302
* Issue #294

Apperently, Twisted made some fairly heavy API changes in their 16.x
release which kinda fucked all the plugins up.
2016-06-08 23:39:58 -06:00
HAMIDx9
f8293c38c9 Fix returning data, check mime to avoid heavy chardet process we are not interested in other mimes. 2016-01-29 01:42:54 +03:30
byt3bl33d3r
27c28e512e Inject.py now tries to detect encoding before parsing HTML with BeautifulSoup 2015-08-23 19:42:52 +02:00
HAMIDx9
7a5186750f Fix encoding in Inject plugin by using manual encoding detection, BS fails in some cases 2015-08-23 20:57:18 +04:30
byt3bl33d3r
ba14ed8687 This commit refactors ARP and DHCP poisoning:
DHCP poisoning now works on Windows, additionaly it's been optimized for performance improvements
ARP poisoning has been optimized with and internal cache and some algo improvements

cve-details-parser.py has been added to the utils/ directory to help adding exploits to the BrowserSniper config file

I'm currently working on adding to the filepwn plugin all of the missing options that bdfproxy stand-alone has
2015-07-25 02:49:41 +02:00
byt3bl33d3r
5e2f30fb89 This is a vewwwy big commit
- The inject plugin now uses beautifulsoup4 to actually parse HTML and add content to it as supposed to using regexes
- The logging of the whole framework has been compleatly overhauled
- plugindetect.js now includes os.js from the metasploit framework for os and browser detection, let's us fingerprint hosts even if UA is lying!
- New plugin HTA Drive-by has been added, prompts the user for a plugin update and makes them download an hta app which contains a powershell payload
- the API of the plugins has been simplified
- Improvements and error handling to user-agent parsing
- Some misc bugfixes
2015-07-18 20:14:07 +02:00
Renamed from plugins/Inject.py (Browse further)