mirror of
https://github.com/bettercap/bettercap
synced 2025-08-21 14:03:17 -07:00
Refactoring modules
This commit is contained in:
parent
c0d3c314fc
commit
ed652622e2
89 changed files with 186 additions and 138 deletions
43
modules/net_sniff/net_sniff_krb5.go
Normal file
43
modules/net_sniff/net_sniff_krb5.go
Normal file
|
@ -0,0 +1,43 @@
|
|||
package net_sniff
|
||||
|
||||
import (
|
||||
"encoding/asn1"
|
||||
|
||||
"github.com/bettercap/bettercap/packets"
|
||||
|
||||
"github.com/google/gopacket"
|
||||
"github.com/google/gopacket/layers"
|
||||
|
||||
"github.com/evilsocket/islazy/tui"
|
||||
)
|
||||
|
||||
func krb5Parser(ip *layers.IPv4, pkt gopacket.Packet, udp *layers.UDP) bool {
|
||||
if udp.DstPort != 88 {
|
||||
return false
|
||||
}
|
||||
|
||||
var req packets.Krb5Request
|
||||
_, err := asn1.UnmarshalWithParams(udp.Payload, &req, packets.Krb5AsReqParam)
|
||||
if err != nil {
|
||||
return false
|
||||
}
|
||||
|
||||
if s, err := req.String(); err == nil {
|
||||
NewSnifferEvent(
|
||||
pkt.Metadata().Timestamp,
|
||||
"krb5",
|
||||
ip.SrcIP.String(),
|
||||
ip.DstIP.String(),
|
||||
nil,
|
||||
"%s %s -> %s : %s",
|
||||
tui.Wrap(tui.BACKRED+tui.FOREBLACK, "krb-as-req"),
|
||||
vIP(ip.SrcIP),
|
||||
vIP(ip.DstIP),
|
||||
s,
|
||||
).Push()
|
||||
|
||||
return true
|
||||
}
|
||||
|
||||
return false
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue