def run(self):
killSessions = True
spoofFavicon = False
listenPort = self.port
sslstrip_version = "0.9"
sergio_version = "0.2.1"
if self.loaderPlugins['plugins'] != None:
self.PumpPlugins[
self.loaderPlugins['plugins']].getInstance()._activated = True
self.PumpPlugins[
self.loaderPlugins['plugins']].getInstance().setInjectionCode(
self.loaderPlugins['Content'], self.session)
# load plugins will be implemented coming soon
parser = argparse.ArgumentParser(
description="Sergio Proxy v%s - An HTTP MITM Tool" %
sergio_version,
epilog="Use wisely, young Padawan.",
fromfile_prefix_chars='@')
#add sslstrip options
sgroup = parser.add_argument_group("sslstrip",
"Options for sslstrip library")
sgroup.add_argument("-w",
"--write",
type=argparse.FileType('w'),
metavar="filename",
default=stdout,
help="Specify file to log to (stdout by default).")
sgroup.add_argument("--log-level",
type=str,
choices=['debug', 'info', 'warning', 'error'],
default="info",
help="Specify file to log to (stdout by default).")
slogopts = sgroup.add_mutually_exclusive_group()
slogopts.add_argument("-p",
"--post",
action="store_true",
help="Log only SSL POSTs. (default)")
slogopts.add_argument("-s",
"--ssl",
action="store_true",
help="Log all SSL traffic to and from server.")
slogopts.add_argument(
"-a",
"--all",
action="store_true",
help="Log all SSL and HTTP traffic to and from server.")
sgroup.add_argument("-l",
"--listen",
type=int,
metavar="port",
default=10000,
help="Port to listen on (default 10000)")
sgroup.add_argument(
"-f",
"--favicon",
action="store_true",
help="Substitute a lock favicon on secure requests.")
sgroup.add_argument("-k",
"--killsessions",
action="store_true",
help="Kill sessions in progress.")
#add msf options
sgroup = parser.add_argument_group(
"MSF", "Generic Options for MSF integration")
sgroup.add_argument(
"--msf-path",
type=str,
default="/pentest/exploits/framework/",
help="Path to msf (default: /pentest/exploits/framework)")
sgroup.add_argument(
"--msf-rc",
type=str,
default="/tmp/tmp.rc",
help="Specify a custom rc file (overrides all other settings)")
sgroup.add_argument("--msf-user",
type=str,
default="root",
help="Specify what user to run Metasploit under.")
sgroup.add_argument("--msf-lhost",
type=str,
default="192.168.1.1",
help="The IP address Metasploit is listening at.")
plugin_classes = plugin.Plugin.__subclasses__()
#Initialize plugins
plugins = []
try:
for p in plugin_classes:
plugins.append(p())
except:
print "Failed to load plugin class %s" % str(p)
#Give subgroup to each plugin with options
try:
for p in plugins:
if p.desc == "":
sgroup = parser.add_argument_group(
"%s" % p.name, "Options for %s." % p.name)
else:
sgroup = parser.add_argument_group("%s" % p.name, p.desc)
sgroup.add_argument("--%s" % p.optname,
action="store_true",
help="Load plugin %s" % p.name)
if p.has_opts:
p.add_options(sgroup)
except NotImplementedError:
print "Plugin %s claimed option support, but didn't have it." % p.name
args = parser.parse_args()
if args.msf_rc == "/tmp/tmp.rc":
#need to wipe
open(args.msf_rc, "w").close()
args.full_path = path.dirname(path.abspath(__file__))
#All our options should be loaded now, pass them onto plugins
load = []
try:
for p in plugins:
if getattr(args, p.optname):
p.initialize(args)
load.append(p)
except NotImplementedError:
print "Plugin %s lacked initialize function." % p.name
#this whole msf loading process sucks. need to improve
if args.msf_rc != "/tmp/tmp.rc" or stat("/tmp/tmp.rc").st_size != 0:
from plugins.external.sergio_proxy import launch_msf
launch_msf(args.msf_path, args.msf_rc, args.msf_user)
from plugins.external.sslstrip.StrippingProxy import StrippingProxy
from plugins.external.sergio_proxy.sslstrip.URLMonitor import URLMonitor
from plugins.external.sergio_proxy.sslstrip.CookieCleaner import CookieCleaner
URLMonitor.getInstance().setFaviconSpoofing(spoofFavicon)
CookieCleaner.getInstance().setEnabled(killSessions)
strippingFactory = http.HTTPFactory(timeout=10)
strippingFactory.protocol = StrippingProxy
strippingFactory.protocol.requestFactory.logging = self.logging
print 'sslstrip {} + sergio-proxy v{} online'.format(
sslstrip_version, sergio_version)
#self.connectorSP = reactor.listenTCP(int(listenPort), strippingFactory)
self.connectorSP = TCP4ServerEndpoint(reactor, int(listenPort))
self.connectorSP.listen(strippingFactory)
def run(self):
killSessions = True
spoofFavicon = False
listenPort = self.port
sslstrip_version = "0.9"
sergio_version = "0.2.1"
if self.loaderPlugins['plugins'] != None:
self.PumpPlugins[self.loaderPlugins['plugins']].getInstance()._activated = True
self.PumpPlugins[self.loaderPlugins['plugins']].getInstance().setInjectionCode(
self.loaderPlugins['Content'],self.session)
# load plugins will be implemented coming soon
parser = argparse.ArgumentParser(
description="Sergio Proxy v%s - An HTTP MITM Tool" % sergio_version,
epilog="Use wisely, young Padawan.",
fromfile_prefix_chars='@' )
#add sslstrip options
sgroup = parser.add_argument_group("sslstrip",
"Options for sslstrip library")
sgroup.add_argument("-w","--write",type=argparse.FileType('w'),
metavar="filename", default=stdout,
help="Specify file to log to (stdout by default).")
sgroup.add_argument("--log-level",type=str,
choices=['debug','info','warning','error'],default="info",
help="Specify file to log to (stdout by default).")
slogopts = sgroup.add_mutually_exclusive_group()
slogopts.add_argument("-p","--post",action="store_true",
help="Log only SSL POSTs. (default)")
slogopts.add_argument("-s","--ssl",action="store_true",
help="Log all SSL traffic to and from server.")
slogopts.add_argument("-a","--all",action="store_true",
help="Log all SSL and HTTP traffic to and from server.")
sgroup.add_argument("-l","--listen",type=int,metavar="port",default=10000,
help="Port to listen on (default 10000)")
sgroup.add_argument("-f","--favicon",action="store_true",
help="Substitute a lock favicon on secure requests.")
sgroup.add_argument("-k","--killsessions",action="store_true",
help="Kill sessions in progress.")
#add msf options
sgroup = parser.add_argument_group("MSF",
"Generic Options for MSF integration")
sgroup.add_argument("--msf-path",type=str,default="/pentest/exploits/framework/",
help="Path to msf (default: /pentest/exploits/framework)")
sgroup.add_argument("--msf-rc",type=str,default="/tmp/tmp.rc",
help="Specify a custom rc file (overrides all other settings)")
sgroup.add_argument("--msf-user",type=str,default="root",
help="Specify what user to run Metasploit under.")
sgroup.add_argument("--msf-lhost",type=str,default="192.168.1.1",
help="The IP address Metasploit is listening at.")
plugin_classes = plugin.Plugin.__subclasses__()
#Initialize plugins
plugins = []
try:
for p in plugin_classes:
plugins.append(p())
except:
print "Failed to load plugin class %s" % str(p)
#Give subgroup to each plugin with options
try:
for p in plugins:
if p.desc == "":
sgroup = parser.add_argument_group("%s" % p.name,
"Options for %s." % p.name)
else:
sgroup = parser.add_argument_group("%s" % p.name,
p.desc)
sgroup.add_argument("--%s" % p.optname, action="store_true",
help="Load plugin %s" % p.name)
if p.has_opts:
p.add_options(sgroup)
except NotImplementedError:
print "Plugin %s claimed option support, but didn't have it." % p.name
args = parser.parse_args()
if args.msf_rc == "/tmp/tmp.rc":
#need to wipe
open(args.msf_rc,"w").close()
args.full_path = path.dirname(path.abspath(__file__))
#All our options should be loaded now, pass them onto plugins
load = []
try:
for p in plugins:
if getattr(args,p.optname):
p.initialize(args)
load.append(p)
except NotImplementedError:
print "Plugin %s lacked initialize function." % p.name
#this whole msf loading process sucks. need to improve
if args.msf_rc != "/tmp/tmp.rc" or stat("/tmp/tmp.rc").st_size != 0:
from plugins.external.sergio_proxy import launch_msf
launch_msf(args.msf_path,args.msf_rc,args.msf_user)
from plugins.external.sergio_proxy.sslstrip.StrippingProxy import StrippingProxy
from plugins.external.sergio_proxy.sslstrip.URLMonitor import URLMonitor
from plugins.external.sergio_proxy.sslstrip.CookieCleaner import CookieCleaner
URLMonitor.getInstance().setFaviconSpoofing(spoofFavicon)
CookieCleaner.getInstance().setEnabled(killSessions)
strippingFactory = http.HTTPFactory(timeout=10)
strippingFactory.protocol = StrippingProxy
print 'sslstrip {} + sergio-proxy v{} online'.format(sslstrip_version,sergio_version)
self.connectorSP = reactor.listenTCP(int(listenPort), strippingFactory)