config | ||
core | ||
libs | ||
logs | ||
plugins | ||
tools | ||
.gitignore | ||
.gitmodules | ||
CHANGELOG.md | ||
CONTRIBUTING.md | ||
CONTRIBUTORS.md | ||
kali_setup.sh | ||
LICENSE | ||
lock.ico | ||
mitmf.py | ||
other_setup.sh | ||
README.md |
#MITMf V0.9.8 - 'The Dark Side'
Framework for Man-In-The-Middle attacks
Quick tutorials, examples and developer updates at: https://byt3bl33d3r.github.io
This tool is based on sergio-proxy and is an attempt to revive and update the project.
Contact me at:
- Twitter: @byt3bl33d3r
- IRC on Freenode: #MITMf
- Email: byt3bl33d3r@gmail.com
Before submitting issues, please read the FAQ and CONTRIBUTING.md.
Available plugins
HTA Drive-By
- Injects a fake update notification and prompts clients to download an HTA applicationSMBtrap
- Exploits the 'SMB Trap' vulnerability on connected clientsScreenshotter
- Uses HTML5 Canvas to render an accurate screenshot of a clients browserResponder
- LLMNR, NBT-NS, WPAD and MDNS poisonerSSLstrip+
- Partially bypass HSTSSpoof
- Redirect traffic using ARP spoofing, ICMP redirects or DHCP spoofingBeEFAutorun
- Autoruns BeEF modules based on a client's OS or browser typeAppCachePoison
- Perform app cache poisoning attacksFerret-NG
- Transperently hijacks sessionsBrowserProfiler
- Attempts to enumerate all browser plugins of connected clientsFilePwn
- Backdoor executables sent over HTTP using the Backdoor Factory and BDFProxyInject
- Inject arbitrary content into HTML contentBrowserSniper
- Performs drive-by attacks on clients with out-of-date browser pluginsjskeylogger
- Injects a Javascript keylogger into a client's webpagesReplace
- Replace arbitary content in HTML contentSMBAuth
- Evoke SMB challenge-response authentication attemptsUpsidedownternet
- Flips images 180 degrees
How to install on Kali
apt-get install mitmf
Currently Kali has a very old version of MITMf in its repos, read the Installation section to get the latest version
Installation
If you're rocking Kali and want the latest version:
- Clone this repository
- Run the
kali_setup.sh
script
Note: you can ignore any errors when pip
tries to install dependencies, MITMf should be able to run anyway
If you're rocking any other Linux distro:
- Clone this repository
- Run the
other_setup.sh
script - Run the command
pip install --upgrade mitmflib
to install all Python dependencies
FAQ
-
Is Windows supported?
-
No, it will never be supported (so don't ask).
-
Is OSX supported?
-
Yes! Initial compatibility has been introduced in 0.9.8! Find anything broken submit a PR or open an issue ticket!
-
I can't install package X because of an error!
-
Try installing the package via
pip
or your distro's package manager. This isn't a problem with MITMf. -
How do I install package X?
-
Please read the installation guide.
-
I get an ImportError when launching MITMf!
-
Please read the installation guide.
-
Dude, no documentation?
-
The docs are a work in progress at the moment, once the framework hits 1.0 I will push them to the wiki