Framework for Man-In-The-Middle attacks
Find a file
2014-07-13 18:47:01 +02:00
app_cache_poison initial commit 2014-07-07 13:40:49 +02:00
bdfactory@63ae286b54 added submodule bdfactory 2014-07-12 08:31:09 +02:00
plugins modified outout formatting 2014-07-13 18:47:01 +02:00
sslstrip modified outout formatting 2014-07-13 18:47:01 +02:00
.gitignore filepwn plugin intial commit 2014-07-12 17:18:32 +02:00
.gitmodules added submodule bdfactory 2014-07-12 08:31:09 +02:00
filepwn.cfg added config file for FilePwn plugin 2014-07-12 17:22:53 +02:00
LICENSE Initial commit 2014-07-07 13:13:51 +02:00
lock.ico initial commit 2014-07-07 13:40:49 +02:00
mitmf.py modified outout formatting 2014-07-13 18:47:01 +02:00
README.md Update README.md 2014-07-13 10:32:04 +02:00

MITMf

Framework for Man-In-The-Middle attacks

This tool is completely based on sergio-proxy https://code.google.com/p/sergio-proxy/ and is an attempt to revive and update the project.

So far the most significant changes have been:

  • Arpspoof plugin has been completely re-written to use scapy (Now able to poison via arp-requests and arp-replies)

  • Usage of third party tools has been completely removed (e.g. ettercap)

  • Addition of the BrowserProfiler plugin

  • Addition of the JsKeylogger plugin

  • FilePwn plugin re-written to backdoor executables and zip files on the fly by using the-backdoor-factory
    https://github.com/secretsquirrel/the-backdoor-factory

  • Addition of the app-cache poisoning attack by Krzysztof Kotowicz

Coming Soon:

  • Update hijacking (e.g. evilgrade)
  • Add PDF support to the FilePwn plugin
  • MSFrpc support would be awesome