MIMTf-man-in-the-middle attack test framework

MIMTf-man-in-the-middle attack test framework
MIMTf Introduction

MIMTf is called The Framework for Man-In-The-Middle attacks (mitm attack Framework). It is modified based on The sergio-proxy tool and is strongly driven by Python.

MIMTf available plug-ins Responder-LLMNR, NBT-NS and MDNS poisonerSSLstrip +-Partially bypass HSTSSpoof-Redirect traffic using ARP Spoofing, ICMP Redirects or DHCP Spoofing and modify DNS queriesSniffer-Sniffs for varous protocol login and auth between-Autoruns BeEF modules based on clients OS or browser preview-Perform app cache poison sessions-Performs session hijacking attacks, and stores cookies in a firefox Plugin-Attempts to enumerate all browser plugins of connected Plugin-Kills page caching by modifying container-Backdoor executables being sent over http using container-Inject arbitrary content into HTML contentJavaPwn -Performs drive-by attacks on clients with out-of-date java browser plugin-Injects a javascript keylogger into clients webpagesReplace-Replace arbitary content in HTML contentSMBAuth-evke SMB challenge-response auth response -Flips images 180 degreesMIMTf Installation

How to install it on the kali system:

apt-get install mitmf

The following is my installation in ubuntu 12.04 LTS:

test@ff0000team:~/data$ git clone https://github.com/byt3bl33d3r/MITMf.gittest@ff0000team:~/data$ cd MITMf/test@ff0000team:~/data/MITMf$ sudo ./setup.sh

Check requirements.txt. You can see that MIMTf has many dependencies:

Twistedrequestsscapymsgpack-pythondnspythonuser-agentsconfigobjpyyamlNetfilterQueue> = 0.6ua-parserPillowpefilecapstone

Run after installation:

python mitmf.py --help

In case of a lack of module dependencies, you can use pip or easy_install to install the dependency. In addition, you need to mention that there is Google source in the dependency library, therefore, if the dependency is not crossed, it may fail to be downloaded. For example, for pefile, you can download, unzip, and install it on the pypi official website.

Sometimes the package name is different from the installation name, for example:

ImportError: No module named pcapsudo apt-get install python-libpcap ImportError: No module named msgpackeasy_install msgpack-python

In addition, the Dependency change in README on the project homepage! Reminder:

As of v0.9.5 DNS tampering support needs NetfilterQueue v0.6 which is currently a fork, so it cannot be installed via pip or easy_install.

 

Is the dependency problem about netfilterqueue, solution:

 

ImportError: No module named netfilterqueueapt-get install build-essential python-dev libnetfilter-queue-devpip install NetfilterQueue

Or directly go to the netfilterqueue project homepage to download and install:

Github: https://github.com/kti/python-netfilterqueue

MITMf run

Test @ ffw.team :~ /Data/MITMf $ python mitmf. py -- help ----------- BANNER ---------- usage: MITMf v0.9.5-Framework for MITM attacks optional arguments:-h, -- help show this help message and exit-v, -- version show program's version number and exit

How can I determine whether the service is running properly?

After the mitmf. py entry file is run, the following error message is not displayed on the BANNER (LOGO.

[-] Wrong version of NetfilterQueue library installed! [-] Download it from here https://github.com/fqrouter/python-netfilterqueue and manually install it! [-] User_agents library missing! User-Agent parsing will be disabled!

Now, MITMf is running properly and the installation is complete.