MITM Labs/MITMf to Backdoor Browsers - Revision history

Admin at 10:23, 23 August 2016

2016-08-23T10:23:59Z

2016-08-23T10:23:32Z

← Older revision	Revision as of 10:23, 23 August 2016
(No difference)

2016-08-23T09:46:54Z

More about FilePwn attack

@@ Line 37: / Line 37: @@
 You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].
 ==Flags==
 {{MITMFlag}}

2016-08-23T09:35:20Z

Flags

2016-08-23T09:35:10Z

Flags

2016-08-23T09:34:52Z

More about FilePwn attack

← Older revision		Revision as of 09:34, 23 August 2016
Line 37:		Line 37:

	You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].		You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].

			==Flags==

			{{MITMFlag}}

2016-08-23T09:34:30Z

More about FilePwn attack

← Older revision		Revision as of 09:34, 23 August 2016
Line 32:		Line 32:
	==More about FilePwn attack==		==More about FilePwn attack==

	FilePwn is a Python plugin for MITMf that basically calls the [[Metasploit]] framework. More specifically, it calls <code>use exploit/multi/handler</code>~~, which~~ is a ~~browser~~ exploit ~~that~~ can ~~be used~~ to deliver ~~payloads onto~~ a ~~target's system~~. You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].		FilePwn is a Python plugin for MITMf that basically calls the [[Metasploit]] framework.

			More specifically, it calls <code>use exploit/multi/handler</code>. "This MSF module is a stub that provides all of the features of the Metasploit payload system to exploits that have been launched outside of the framework." [https://www.rapid7.com/db/modules/exploit/multi/handler] That means you can call Metasploit from Python, from your filepwn.py script, and utilize Metasploit to deliver a payload to a browser.

			You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].

2016-08-23T08:48:29Z

More about FilePwn

← Older revision		Revision as of 08:48, 23 August 2016
Line 30:		Line 30:
	We'll just be considering one of these: FilePwn. We'll be using an HTTP proxy, and a backdoor factory, to inject backdoor executables via HTTP.		We'll just be considering one of these: FilePwn. We'll be using an HTTP proxy, and a backdoor factory, to inject backdoor executables via HTTP.

	==More about FilePwn==		==More about FilePwn attack==

	FilePwn is a Python plugin for MITMf that basically calls the [[Metasploit]] framework. More specifically, it calls <code>use exploit/multi/handler</code>, which is a browser exploit that can be used to deliver payloads onto a target's system. You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].		FilePwn is a Python plugin for MITMf that basically calls the [[Metasploit]] framework. More specifically, it calls <code>use exploit/multi/handler</code>, which is a browser exploit that can be used to deliver payloads onto a target's system. You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].

2016-08-23T08:34:57Z

More about FilePwn

← Older revision		Revision as of 08:34, 23 August 2016
Line 32:		Line 32:
	==More about FilePwn==		==More about FilePwn==

	FilePwn is a Python plugin for MITMf that basically calls the [[Metasploit]] framework. More specifically, it calls <code>use exploit/multi/handler</code>, which is a browser exploit that can be used to deliver payloads onto a target's system.		FilePwn is a Python plugin for MITMf that basically calls the [[Metasploit]] framework. More specifically, it calls <code>use exploit/multi/handler</code>, which is a browser exploit that can be used to deliver payloads onto a target's system. You can see what it does from the filepwn.py source code [https://github.com/byt3bl33d3r/MITMf/blob/master/plugins/filepwn.py].

2016-08-23T08:34:26Z

@@ Line 1: / Line 1: @@
 =Backdooring Browsers with MITMf=
 From the MITMf Github repository [https://github.com/byt3bl33d3r/MITMf], a list of attacks available in MITMf:
@@ Line 21: / Line 29: @@
 We'll just be considering one of these: FilePwn. We'll be using an HTTP proxy, and a backdoor factory, to inject backdoor executables via HTTP.