MIM Usage

Description

This is a man-in-the-middle proxy server.

Plugins can subscribe to events to read and manipulate requests and responses. A number of plugins are included. It is easy to add more based on these.

Installation

• git clone https://github.com/simonm3/mim
• pip install -r requirements.txt
• If you want to use the beef framework then: apt-get install beef-xss

Scripts (run with -h to see usage and options)

Plugins included

Alternative ways to send requests to the proxy

1. Redirect browser

• proxy.py
• Set browser proxy settings to point to ip address of proxy PC port 10000

2. Run arp attack

• proxy.py
• users.py to see available machines to target on the local network
• arp <target> to initiate arp attack on a target ip

3. Run fake access point

• fakeap
• connect to Free Wifi from target pc
• proxy.py [NOTE: run after fakeAP to set firewall settings]

How to create a plugin

• Create a module file in plugins folder based on existing plugins
• Include init function to subscribe to events and initialise
• Edit the docstring for proxy.py to add the option

Where does it work

• Tested via usage on a range of websites using proxy settings, arp attack and fakeAP
• It should never block and has a timeout on web requests

Where does it not work

Arp attack

• Some security software prevents arp attacks
• VirtualBox guest that shares mac address with host

HTTPS

• Https requests typed directly in the address bar will not be intercepted
• HttpsEverywhere (chrome extension) prevents interception
• Some websites enforce https via the browser e.g. gmail, facebook
• Some websites change http links back to https after the page loads e.g. ebay

Incorrect headers or HTML

• Calling lxml.html.fromstring then tostring can change the page
• Alternative is to use lxml.etree but this causes issues with other pages

MIM Design

Core files

Built in python2.7 using "twisted.web" and follows this chain:

• proxy1 (a bash script that runs proxy.py with selected options)

  => Proxy.py

• proxyserver [listens for connections]

  => ProxyFactory(http.HTTPFactory)

  => Proxy(http.HTTPChannel)

  => Request(http.Request)

• proxyclient [creates connections to web]

  => ProxyClientFactory(proxy.ProxyClientFactory)

  => ProxyClient(proxy.ProxyClient, TimeoutMixin)

  => internet

Other files