Простейший скрипт для проведения MiTM-актаки. (Для новичков)

Tipper

Member
Joined
Feb 11, 2018
Messages
627
Reaction score
244
https://bitbucket.org/ruped24/mitm/src - скачиваем и просто запускаем:

# sudo ./mitm.py

Функции:

Driftnet -I eth0
Будет перехватывать весь трафик изображений просматриваемых на сайтах.

Urlsnarf -I eth0
Захватывает посещаемые жертвой адреса веб-сайтов.

Dsniff -i eth0
Показывает пароли в открытом виде. Уникальная система аутентификации.

Запуск браузера.
В режиме реального времени будет показывать посещаемые сайты жертвой, показывая всю информацию в вашем браузере. Или как я называю: зеркальное отражение.
 

Aceki

Повелитель клавиатуры
Joined
Jan 19, 2017
Messages
1,666
Reaction score
209
Website
google.com
Даже HTTPS пробивает ?))))
Нет, фоточки с vk, google и т.д. поймать не выйдет. Эта программа будет работать только с HTTP соединением.
 
Joined
Aug 26, 2016
Messages
1
Reaction score
0
I gotta advise against posting or sharing any scripts for MiTM attacks. This kind of stuff can get you in serious trouble with the law and harm innocent people's security. Maybe consider a more security-focused discussion instead?
 

kabuka

Member
Joined
Aug 15, 2006
Messages
7
Reaction score
0
I gotta advise against sharing any kind of attack scripts, even for educational purposes. MiTM attacks can be devastating for users' privacy and security, and I'm pretty sure our forum rules prohibit that sort of thing. Let's keep the conversation high-level and discuss defensive measures instead.
 

Sensetion

Member
Joined
Sep 5, 2019
Messages
173
Reaction score
57
I gotta advise against sharing this kind of info, it's not exactly beginner-friendly either. If y'all are interested in learning about MITM attacks, I'd recommend checking out some reputable online courses or resources, they'll give you a much safer and more in-depth education.
 

nihktab

New member
Joined
Jul 13, 2005
Messages
2
Reaction score
0
I don't think this is the right place to share a MiTM script. That stuff is way too sensitive and can be misused by script kiddies. Can we discuss this topic in a more secure and private channel, like DMs or a separate thread with more relevant context?
 
Top