Commit graph

18 commits

Author SHA1 Message Date
byt3bl33d3r
22a43df4f8 DNS server now outputs all queries to seperate log file
Fixed a bug where the SSLStrip proxy wouldn't allow caching if the AppCache poison plugin is enabled
HTTP and SMB servers now listen on all interfaces
2015-09-06 12:47:07 +02:00
byt3bl33d3r
9add87c5b2 Fixed a bug where the DNS server would throw a traceback when multiple named servers are specified 2015-09-06 11:23:45 +02:00
byt3bl33d3r
a0fecd4a38 reverts changes from PR #183, fixes issue #187 2015-09-06 10:51:40 +02:00
HAMIDx9
00745afb35 Fix improperly use config multiple nameservers 2015-09-03 11:50:02 +04:30
byt3bl33d3r
1a50f000c1 added an option to parse creds from a pcap using NetCreds, removed mitmflib as a dep (was causing problems for travis) 2015-08-11 17:11:44 +02:00
byt3bl33d3r
e22276477b fixes #150
Forgot to start up the Browser server.. oops!
2015-08-05 14:32:22 +02:00
byt3bl33d3r
772ef9ab39 responder code is now up to date with the lastest version
logging is going to have to get cleaned up, but that's a minor issue
re-implemented the function to add endpoints to the http server
added an option to manually specify the gateways mac in the Spoofer plugin
2015-08-05 13:31:04 +02:00
byt3bl33d3r
fa59ca466b third pass:
- All servers back online
- modified logging
2015-08-03 05:34:46 +02:00
byt3bl33d3r
8b55a2e3f5 Second pass:
MDNS, LLMNR and NBTNS poisoners are back online
HTTP server now functional
2015-08-02 22:53:16 +02:00
byt3bl33d3r
fd9b79c617 first pass at refactoring:
directory structure has been simplified by grouping all the poisoners and servers in one folder
impacket smb server has been replaced with responder's
flask http server has beem replaced with responder's
modified config file to support new changes
2015-08-02 21:15:10 +02:00
byt3bl33d3r
ba14ed8687 This commit refactors ARP and DHCP poisoning:
DHCP poisoning now works on Windows, additionaly it's been optimized for performance improvements
ARP poisoning has been optimized with and internal cache and some algo improvements

cve-details-parser.py has been added to the utils/ directory to help adding exploits to the BrowserSniper config file

I'm currently working on adding to the filepwn plugin all of the missing options that bdfproxy stand-alone has
2015-07-25 02:49:41 +02:00
byt3bl33d3r
5e2f30fb89 This is a vewwwy big commit
- The inject plugin now uses beautifulsoup4 to actually parse HTML and add content to it as supposed to using regexes
- The logging of the whole framework has been compleatly overhauled
- plugindetect.js now includes os.js from the metasploit framework for os and browser detection, let's us fingerprint hosts even if UA is lying!
- New plugin HTA Drive-by has been added, prompts the user for a plugin update and makes them download an hta app which contains a powershell payload
- the API of the plugins has been simplified
- Improvements and error handling to user-agent parsing
- Some misc bugfixes
2015-07-18 20:14:07 +02:00
byt3bl33d3r
ff0ada2a39 Revamped logging , plugins will be re-added later once refactored 2015-07-14 17:40:19 +02:00
byt3bl33d3r
f99080fc4c fixed error in Exception handling in SMBserver.py 2015-06-15 01:04:47 +02:00
byt3bl33d3r
aa246130e2 updated requirements.txt, changed imports to mitmflib 2015-06-11 22:05:22 +02:00
byt3bl33d3r
14580f1589 second implementation of the HTTP server, you can now define shares for the SMB server in the config file, added an option to switch between the normal SMB server and the Karma version.
removed some useless code (left over from the responder plugin), serverResponseStatus hook now returns a dict (tuple was causing errors)
2015-05-30 15:00:41 +02:00
byt3bl33d3r
840e202e5b handleStatus() is now hooked through serverResponseStatus, were now able to modify the server response code and message
added the SMBTrap plugin
2015-05-22 20:16:47 +02:00
byt3bl33d3r
929520fcc8 Initial webserver implementation, plus organized directory structure a bit better 2015-05-19 22:43:43 +02:00