github/bettercap
1
0
Fork 0
mirror of https://github.com/bettercap/bettercap synced 2025-08-19 21:13:18 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

misc: small fix or general refactoring i did not bother commenting

Browse source
This commit is contained in:
evilsocket 2018-02-15 17:05:54 +01:00
commit a49190bb5b
1 changed files with 9 additions and 90 deletions
Download patch file Download diff file Expand all files Collapse all files

99
modules/arp_spoof.go
View file

@ -147,102 +147,21 @@ func (p *ArpSpoofer) pktRouter(eth *layers.Ethernet, ip4 *layers.IPv4, pkt gopac
// check if this packet is from or to one of the spoofing targets
// and therefore needs patching and forwarding.
for _, target := range p.addresses {
targetMAC, err := p.getMAC(target, true)
if err != nil {
log.Error("Error retrieving target MAC address for %s", target.String(), err)
continue
}
// If SRC_MAC is different from both TARGET(s) & GW ignore
if bytes.Compare(eth.SrcMAC, targetMAC) != 0 && bytes.Compare(eth.SrcMAC, p.Session.Gateway.HW) != 0 {
// TODO Delete this debug
//log.Debug("[ignored] [%s] ===> [%s]", eth.SrcMAC, eth.DstMAC)
continue
}
// If DST_MAC is not our Interface.IP ignore
if bytes.Compare(eth.DstMAC, p.Session.Interface.HW) != 0 {
// TODO Delete this debug
//log.Warning("[notForMiTM] [(%s) %s] ===> [%s (%s)]", eth.SrcMAC, ip4.SrcIP, ip4.DstIP, eth.DstMAC)
continue
}
if !ip4.SrcIP.Equal(target) && !ip4.DstIP.Equal(target) {
// TODO Delete this debug
//log.Warning("[notTarget] [(%s) %s] ===> [%s (%s)]", eth.SrcMAC, ip4.SrcIP, ip4.DstIP, eth.DstMAC)
continue
}
//
// Craft packet
// TODO Is it possible craft directly pkt?! So we don't have to mess with anything other than IP and ETH layers?
// we're only interested in packets:
//
// 1. generated from one of our targets.
// 2. going to the router IP
// 3. but with our mac addresses as destination
var cETH = new(layers.Ethernet)
cETH.BaseLayer = eth.BaseLayer
cETH.EthernetType = eth.EthernetType
cETH.Length = eth.Length
var cIPV4 = new(layers.IPv4)
if bytes.Compare(eth.SrcMAC, targetMAC) == 0 {
// TODO Delete this debug
log.Error("[Reinject] [(%s) %s] ===> [%s (%s)]", eth.SrcMAC, ip4.SrcIP, ip4.DstIP, eth.DstMAC)
cETH.SrcMAC = p.Session.Interface.HW
cETH.DstMAC = p.Session.Gateway.HW
cIPV4.SrcIP = p.Session.Interface.IP
cIPV4.DstIP = ip4.DstIP
} else {
// Receiving from Gateway
// TODO Delete this debug
log.Warning("[Reinject] [(%s) %s] <=== [%s (%s)]", eth.SrcMAC, ip4.SrcIP, ip4.DstIP, eth.DstMAC)
cETH.SrcMAC = p.Session.Interface.HW
cETH.DstMAC = targetMAC
cIPV4.SrcIP = ip4.SrcIP
cIPV4.DstIP = target
}
var buffer gopacket.SerializeBuffer
var options gopacket.SerializeOptions
// TCP
tcpLayer := pkt.Layer(layers.LayerTypeTCP)
if tcpLayer == nil {
log.Error("[Not a TCP .. better handle in another way this PKT Injection .. TODO!]")
if ip4.SrcIP.Equal(target) == false {
continue
}
tcp, _ := tcpLayer.(*layers.TCP)
// App Layer
applicationLayer := pkt.ApplicationLayer()
var payload []byte
if applicationLayer != nil {
payload = applicationLayer.Payload()
}
// Crafted packet
buffer = gopacket.NewSerializeBuffer()
gopacket.SerializeLayers(buffer, options,
cETH,
cIPV4,
tcp,
gopacket.Payload(payload),
)
outgoingPacket := buffer.Bytes()
if err := p.Session.Queue.Send(outgoingPacket); err != nil {
log.Error("Error ReInjecting: [(%s) %s] ===> [%s (%s)]\n", cETH.SrcMAC, cIPV4.SrcIP, cIPV4.DstIP, cETH.DstMAC)
} else if ip4.DstIP.Equal(p.Session.Gateway.IP) == false {
continue
} else if bytes.Compare(eth.DstMAC, p.Session.Interface.HW) != 0 {
continue
}
// TODO Are packets really injected?! Can't see them using Wireshark
log.Warning("[INJECTED???!] [(%s) %s] ===> [%s (%s)]\n", cETH.SrcMAC, cIPV4.SrcIP, cIPV4.DstIP, cETH.DstMAC)
log.Warning("Got packet to route: %s\n", pkt.String())
}
}