安全-中间人攻击MIMTF框架

2018-04-11 本文已影响2人 yunpiao

title: 安装MIMTf 框架
tags: [安全, yunpiao]
date: 2017-05-11 15:48:48

MIMTf 介绍

Github 项目主页：https://github.com/byt3bl33d3r/MITMf
开发案例及更新：http://sign0f4.blogspot.it/
MIMTf 项目作者：byt3bl33d3r
MIMTf 全称为 Framework for Man-In-The-Middle attacks （中间人攻击框架），它基于 sergio-proxy 代理工具修改而来，由 Python 强势驱动。

MIMTf 可用插件

Responder - LLMNR, NBT-NS and MDNS poisoner
SSLstrip+ - Partially bypass HSTS
Spoof - Redirect traffic using ARP Spoofing, ICMP Redirects or DHCP Spoofing and modify DNS queries
Sniffer - Sniffs for various protocol login and auth attempts
BeEFAutorun - Autoruns BeEF modules based on clients OS or browser type
AppCachePoison - Perform app cache poison attacks
SessionHijacking - Performs session hijacking attacks, and stores cookies in a firefox profile
BrowserProfiler - Attempts to enumerate all browser plugins of connected clients
CacheKill - Kills page caching by modifying headers
FilePwn - Backdoor executables being sent over http using bdfactory
Inject - Inject arbitrary content into HTML content
JavaPwn - Performs drive-by attacks on clients with out-of-date java browser plugins
jskeylogger - Injects a javascript keylogger into clients webpages
Replace - Replace arbitary content in HTML content
SMBAuth - Evoke SMB challenge-response auth attempts
Upsidedownternet - Flips images 180 degrees

安装

安装依赖

apt-get install python-dev python-setuptools libpcap0.8-dev libnetfilter-queue-dev libssl-dev libjpeg-dev libxml2-dev libxslt1-dev libcapstone3 libcapstone-dev libffi-dev file virtualenv

创建虚拟环境

virtualenv -p python2 ~/Env

clone 项目

git clone https://github.com/byt3bl33d3r/MITMf

安装 pip model

pip install -r requirements.txt

Start

python mitmf.py