github/MITMf
1
0
Fork 0
mirror of https://github.com/byt3bl33d3r/MITMf.git synced 2025-07-06 21:12:16 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions
Framework for Man-In-The-Middle attacks
62 commits 2 branches 10 tags 1.6 MiB
Find a file
byt3bl33d3r 8c4d55b01b fixed rearping error
2014-07-18 11:34:08 +02:00
app_cache_poison initial commit 2014-07-07 13:40:49 +02:00
bdfactory@63ae286b54 added submodule bdfactory 2014-07-12 08:31:09 +02:00
plugins fixed rearping error 2014-07-18 11:34:08 +02:00
sslstrip made rpc pass configurable 2014-07-18 11:08:50 +02:00
.gitignore filepwn plugin intial commit 2014-07-12 17:18:32 +02:00
.gitmodules added submodule bdfactory 2014-07-12 08:31:09 +02:00
filepwn.cfg added config file for FilePwn plugin 2014-07-12 17:22:53 +02:00
LICENSE Initial commit 2014-07-07 13:13:51 +02:00
lock.ico initial commit 2014-07-07 13:40:49 +02:00
mitmf.py removed a print statement 2014-07-15 22:51:37 +02:00
msfrpc.py added JavaPwn plugin 2014-07-15 17:47:42 +02:00
README.md updated readme with new plugin 2014-07-18 04:45:43 +02:00

README.md

MITMf

Framework for Man-In-The-Middle attacks

Quick tutorial and examples at http://sign0f4.blogspot.it

This tool is completely based on sergio-proxy https://code.google.com/p/sergio-proxy/ and is an attempt to revive and update the project.

So far the most significant changes have been:

  • Arpspoof plugin has been completely re-written to use scapy (Now able to poison via arp-requests and arp-replies)

  • Usage of third party tools has been completely removed (e.g. ettercap)

  • Addition of the BrowserProfiler plugin

  • Addition of the JsKeylogger plugin

  • FilePwn plugin re-written to backdoor executables and zip files on the fly by using the-backdoor-factory https://github.com/secretsquirrel/the-backdoor-factory and code from BDFProxy https://github.com/secretsquirrel/BDFProxy

  • Added msfrpc.py for interfacing with Metasploits rpc server

  • Added Link Re-Writer plugin

  • Addition of the app-cache poisoning attack by Krzysztof Kotowicz

  • JavaPwn plugin now live! Auto-detect and exploit clients with out-of-date java plugins using the Metasploit Frameworks rpc interface!!

Coming Soon:

  • Update hijacking ??? (e.g. evilgrade)