mirror of
https://github.com/byt3bl33d3r/MITMf.git
synced 2025-07-05 20:42:20 -07:00
DHCP poisoning now works on Windows, additionaly it's been optimized for performance improvements ARP poisoning has been optimized with and internal cache and some algo improvements cve-details-parser.py has been added to the utils/ directory to help adding exploits to the BrowserSniper config file I'm currently working on adding to the filepwn plugin all of the missing options that bdfproxy stand-alone has
153 lines
No EOL
5.7 KiB
Python
Executable file
153 lines
No EOL
5.7 KiB
Python
Executable file
#!/usr/bin/env python2.7
|
|
|
|
# Copyright (c) 2014-2016 Moxie Marlinspike, Marcello Salvati
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; either version 3 of the
|
|
# License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
# General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
|
|
# USA
|
|
#
|
|
|
|
import logging
|
|
logging.getLogger("scapy.runtime").setLevel(logging.ERROR) #Gets rid of IPV6 Error when importing scapy
|
|
logging.getLogger("requests").setLevel(logging.WARNING) #Disables "Starting new HTTP Connection (1)" log message
|
|
logging.getLogger("mitmflib.watchdog").setLevel(logging.ERROR) #Disables watchdog's debug messages
|
|
logging.getLogger('mitmflib.smbserver').setLevel(logging.INFO)
|
|
logging.getLogger('mitmflib.impacket').setLevel(logging.INFO)
|
|
|
|
import argparse
|
|
import sys
|
|
import os
|
|
import threading
|
|
|
|
from twisted.web import http
|
|
from twisted.internet import reactor
|
|
from core.logger import logger
|
|
from core.banners import get_banner
|
|
from plugins import *
|
|
|
|
print get_banner()
|
|
|
|
mitmf_version = '0.9.8'
|
|
mitmf_codename = 'The Dark Side'
|
|
|
|
if os.geteuid() != 0:
|
|
sys.exit("[-] The derp is strong with this one")
|
|
|
|
parser = argparse.ArgumentParser(description="MITMf v{} - '{}'".format(mitmf_version, mitmf_codename),
|
|
version="{} - '{}'".format(mitmf_version, mitmf_codename),
|
|
usage='mitmf.py -i interface [mitmf options] [plugin name] [plugin options]',
|
|
epilog="Use wisely, young Padawan.")
|
|
|
|
#add MITMf options
|
|
sgroup = parser.add_argument_group("MITMf", "Options for MITMf")
|
|
sgroup.add_argument("--log-level", type=str,choices=['debug', 'info'], default="info", help="Specify a log level [default: info]")
|
|
sgroup.add_argument("-i", dest='interface', required=True, type=str, help="Interface to listen on")
|
|
sgroup.add_argument("-c", dest='configfile', metavar="CONFIG_FILE", type=str, default="./config/mitmf.conf", help="Specify config file to use")
|
|
sgroup.add_argument('-m', '--manual-iptables', dest='manualiptables', action='store_true', default=False, help='Do not setup iptables or flush them automatically')
|
|
sgroup.add_argument("-p", "--preserve-cache", action="store_true", help="Don't kill client/server caching")
|
|
sgroup.add_argument("-l", dest='listen_port', type=int, metavar="PORT", default=10000, help="Port to listen on (default 10000)")
|
|
sgroup.add_argument("-f", "--favicon", action="store_true", help="Substitute a lock favicon on secure requests.")
|
|
sgroup.add_argument("-k", "--killsessions", action="store_true", help="Kill sessions in progress.")
|
|
|
|
#Initialize plugins and pass them the parser NameSpace object
|
|
plugins = [plugin(parser) for plugin in plugin.Plugin.__subclasses__()]
|
|
|
|
if len(sys.argv) == 1:
|
|
parser.print_help()
|
|
sys.exit(1)
|
|
|
|
options = parser.parse_args()
|
|
|
|
#Set the log level
|
|
logger().log_level = logging.__dict__[options.log_level.upper()]
|
|
|
|
#Check to see if we supplied a valid interface, pass the IP and MAC to the NameSpace object
|
|
from core.utils import get_ip, get_mac, shutdown
|
|
options.ip = get_ip(options.interface)
|
|
options.mac = get_mac(options.interface)
|
|
|
|
from core.sslstrip.CookieCleaner import CookieCleaner
|
|
from core.sergioproxy.ProxyPlugins import ProxyPlugins
|
|
from core.sslstrip.StrippingProxy import StrippingProxy
|
|
from core.sslstrip.URLMonitor import URLMonitor
|
|
|
|
URLMonitor.getInstance().setFaviconSpoofing(options.favicon)
|
|
CookieCleaner.getInstance().setEnabled(options.killsessions)
|
|
|
|
strippingFactory = http.HTTPFactory(timeout=10)
|
|
strippingFactory.protocol = StrippingProxy
|
|
|
|
reactor.listenTCP(options.listen_port, strippingFactory)
|
|
|
|
ProxyPlugins().all_plugins = plugins
|
|
|
|
#All our options should be loaded now, start initializing the plugins
|
|
print "[*] MITMf v{} - '{}'".format(mitmf_version, mitmf_codename)
|
|
for plugin in plugins:
|
|
|
|
#load only the plugins that have been called at the command line
|
|
if vars(options)[plugin.optname] is True:
|
|
|
|
ProxyPlugins().add_plugin(plugin)
|
|
|
|
print "|_ {} v{}".format(plugin.name, plugin.version)
|
|
if plugin.tree_info:
|
|
for line in xrange(0, len(plugin.tree_info)):
|
|
print "| |_ {}".format(plugin.tree_info.pop())
|
|
|
|
plugin.setup_logger()
|
|
plugin.initialize(options)
|
|
|
|
if plugin.tree_info:
|
|
for line in xrange(0, len(plugin.tree_info)):
|
|
print "| |_ {}".format(plugin.tree_info.pop())
|
|
|
|
plugin.reactor(strippingFactory)
|
|
plugin.start_config_watch()
|
|
|
|
print "|"
|
|
print "|_ Sergio-Proxy v0.2.1 online"
|
|
print "|_ SSLstrip v0.9 by Moxie Marlinspike online"
|
|
print "|"
|
|
|
|
#Start mitmf-api
|
|
from core.mitmfapi import mitmfapi
|
|
print "|_ MITMf-API online"
|
|
mitmfapi().start()
|
|
|
|
#Start Net-Creds
|
|
from core.netcreds.NetCreds import NetCreds
|
|
NetCreds().start(options.interface, options.ip)
|
|
print "|_ Net-Creds v{} online".format(NetCreds.version)
|
|
|
|
#Start the HTTP Server
|
|
from core.servers.http.HTTPserver import HTTPserver
|
|
HTTPserver().start()
|
|
print "|_ HTTP server online"
|
|
|
|
#Start DNSChef
|
|
from core.servers.dns.DNSchef import DNSChef
|
|
DNSChef().start()
|
|
print "|_ DNSChef v{} online".format(DNSChef.version)
|
|
|
|
#Start the SMB server
|
|
from core.servers.smb.SMBserver import SMBserver
|
|
SMBserver().start()
|
|
print "|_ SMB server online [Mode: {}] (Impacket {}) \n".format(SMBserver().mode, SMBserver().version)
|
|
|
|
#start the reactor
|
|
reactor.run()
|
|
|
|
print "\n"
|
|
shutdown() |