Repository: Chan9390/Awesome-MitM Branch: master Commit: cb8c06d98f42 Files: 4 Total size: 12.4 KB Directory structure: gitextract_ittaf1ja/ ├── LICENSE ├── README.md ├── README_CN.md └── contributing.md ================================================ FILE CONTENTS ================================================ ================================================ FILE: LICENSE ================================================ CC0 1.0 Universal Statement of Purpose The laws of most jurisdictions throughout the world automatically confer exclusive Copyright and Related Rights (defined below) upon the creator and subsequent owner(s) (each and all, an "owner") of an original work of authorship and/or a database (each, a "Work"). Certain owners wish to permanently relinquish those rights to a Work for the purpose of contributing to a commons of creative, cultural and scientific works ("Commons") that the public can reliably and without fear of later claims of infringement build upon, modify, incorporate in other works, reuse and redistribute as freely as possible in any form whatsoever and for any purposes, including without limitation commercial purposes. These owners may contribute to the Commons to promote the ideal of a free culture and the further production of creative, cultural and scientific works, or to gain reputation or greater distribution for their Work in part through the use and efforts of others. For these and/or other purposes and motivations, and without any expectation of additional consideration or compensation, the person associating CC0 with a Work (the "Affirmer"), to the extent that he or she is an owner of Copyright and Related Rights in the Work, voluntarily elects to apply CC0 to the Work and publicly distribute the Work under its terms, with knowledge of his or her Copyright and Related Rights in the Work and the meaning and intended legal effect of CC0 on those rights. 1. Copyright and Related Rights. A Work made available under CC0 may be protected by copyright and related or neighboring rights ("Copyright and Related Rights"). Copyright and Related Rights include, but are not limited to, the following: i. the right to reproduce, adapt, distribute, perform, display, communicate, and translate a Work; ii. moral rights retained by the original author(s) and/or performer(s); iii. publicity and privacy rights pertaining to a person's image or likeness depicted in a Work; iv. rights protecting against unfair competition in regards to a Work, subject to the limitations in paragraph 4(a), below; v. rights protecting the extraction, dissemination, use and reuse of data in a Work; vi. database rights (such as those arising under Directive 96/9/EC of the European Parliament and of the Council of 11 March 1996 on the legal protection of databases, and under any national implementation thereof, including any amended or successor version of such directive); and vii. other similar, equivalent or corresponding rights throughout the world based on applicable law or treaty, and any national implementations thereof. 2. Waiver. To the greatest extent permitted by, but not in contravention of, applicable law, Affirmer hereby overtly, fully, permanently, irrevocably and unconditionally waives, abandons, and surrenders all of Affirmer's Copyright and Related Rights and associated claims and causes of action, whether now known or unknown (including existing as well as future claims and causes of action), in the Work (i) in all territories worldwide, (ii) for the maximum duration provided by applicable law or treaty (including future time extensions), (iii) in any current or future medium and for any number of copies, and (iv) for any purpose whatsoever, including without limitation commercial, advertising or promotional purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each member of the public at large and to the detriment of Affirmer's heirs and successors, fully intending that such Waiver shall not be subject to revocation, rescission, cancellation, termination, or any other legal or equitable action to disrupt the quiet enjoyment of the Work by the public as contemplated by Affirmer's express Statement of Purpose. 3. Public License Fallback. Should any part of the Waiver for any reason be judged legally invalid or ineffective under applicable law, then the Waiver shall be preserved to the maximum extent permitted taking into account Affirmer's express Statement of Purpose. In addition, to the extent the Waiver is so judged Affirmer hereby grants to each affected person a royalty-free, non transferable, non sublicensable, non exclusive, irrevocable and unconditional license to exercise Affirmer's Copyright and Related Rights in the Work (i) in all territories worldwide, (ii) for the maximum duration provided by applicable law or treaty (including future time extensions), (iii) in any current or future medium and for any number of copies, and (iv) for any purpose whatsoever, including without limitation commercial, advertising or promotional purposes (the "License"). The License shall be deemed effective as of the date CC0 was applied by Affirmer to the Work. Should any part of the License for any reason be judged legally invalid or ineffective under applicable law, such partial invalidity or ineffectiveness shall not invalidate the remainder of the License, and in such case Affirmer hereby affirms that he or she will not (i) exercise any of his or her remaining Copyright and Related Rights in the Work or (ii) assert any associated claims and causes of action with respect to the Work, in either case contrary to Affirmer's express Statement of Purpose. 4. Limitations and Disclaimers. a. No trademark or patent rights held by Affirmer are waived, abandoned, surrendered, licensed or otherwise affected by this document. b. Affirmer offers the Work as-is and makes no representations or warranties of any kind concerning the Work, express, implied, statutory or otherwise, including without limitation warranties of title, merchantability, fitness for a particular purpose, non infringement, or the absence of latent or other defects, accuracy, or the present or absence of errors, whether or not discoverable, all to the greatest extent permissible under applicable law. c. Affirmer disclaims responsibility for clearing rights of other persons that may apply to the Work or any use thereof, including without limitation any person's Copyright and Related Rights in the Work. Further, Affirmer disclaims responsibility for obtaining any necessary consents, permissions or other rights required for any use of the Work. d. Affirmer understands and acknowledges that Creative Commons is not a party to this document and has no duty or obligation with respect to this CC0 or use of the Work. For more information, please see ================================================ FILE: README.md ================================================ # Awesome-MitM Curated list of MitM frameworks on GitHub ### [bettercap](https://github.com/evilsocket/bettercap) A complete, modular, portable and easily extensible MITM framework ### [CopyCat](https://github.com/compewter/CopyCat) CopyCat is a Node.js based universal MITM web server. Used with DNS spoofing or another redirect attack, this server will act as a MITM for web traffic between the victim and a real server. ### [dnschef](https://github.com/iphelix/dnschef) DNSChef - DNS proxy for Penetration Testers and Malware Analysts ### [dnsmitm](https://github.com/SySS-Research/dns-mitm) A minimal DNS service that can provide spoofed replies ### [Ettercap](https://github.com/Ettercap/ettercap) Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. ### [FakeDns](https://github.com/Crypt0s/FakeDns) A regular-expression based python MITM DNS server with support for DNS Rebinding attacks ### [hyperfox](https://github.com/malfunkt/hyperfox) HTTP/HTTPs MITM proxy and traffic recorder with on-the-fly TLS cert generation ### [mallory](https://github.com/intrepidusgroup/mallory) An extensible TCP/UDP man in the middle proxy that is designed to be run as a gateway ### [MITMf](https://github.com/byt3bl33d3r/MITMf) Framework for Man-In-The-Middle attacks ### [mitmproxy](https://github.com/mitmproxy/mitmproxy) An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers ### [node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) HTTP Man In The Middle (MITM) Proxy written in node.js ### [postgres-mitm](https://github.com/thusoy/postgres-mitm) Test whether your Postgres connections are vulnerable to MitM attacks ### [tiny-mitm-proxy](https://github.com/floyd-fuh/tiny-mitm-proxy) Probably one of the smallest SSL MITM proxies you can make ### [Seth](https://github.com/SySS-Research/Seth) Perform a MitM attack and extract clear text credentials from RDP connections ### [ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH man-in-the-middle tool ### [sslsniff](https://github.com/moxie0/sslsniff) A tool for automated MITM attacks on SSL connections ### [tornado](https://github.com/rebellionil/tornado) All in one MITM tool . ### [warcprox](https://github.com/internetarchive/warcprox) WARC writing MITM HTTP/S proxy ### [websploit](https://github.com/websploit/websploit) An advanced MITM framework ### [wssip](https://github.com/nccgroup/wssip) Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa ## Others ### [mitmAP](https://github.com/xdavidhu/mitmAP) A python program to create a fake AP and sniff data ### [mitm-vm](https://github.com/praetorian-inc/mitm-vm) An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities ### [sshhipot](https://github.com/magisterquis/sshhipot) High-interaction MitM SSH honeypot ### [suddensix](https://github.com/Neohapsis/suddensix) IPV6 MITM attack tool ## Contributions Please have a look at [contributing.md](contributing.md) ================================================ FILE: README_CN.md ================================================ # 优秀的中间人工具 GitHub 上中间人框架的聚合列表 ### [bettercap](https://github.com/evilsocket/bettercap) 一个完整的、模块化的、轻量的、易于扩展的中间人框架 ### [CopyCat](https://github.com/compewter/CopyCat) CopyCat 是一个基于 Node.js 实现的通用型中间人 Web 服务器,可与 DNS 欺骗或其他重定向攻击一起使用。此服务器用作受害者和真实服务器之间 Web 流量的中间人 ### [dnschef](https://github.com/iphelix/dnschef) DNSChef - 渗透测试工程师与恶意软件分析员的 DNS 代理 ### [dnsmitm](https://github.com/SySS-Research/dns-mitm) 可提供 DNS 欺骗响应服务的最小 DNS 服务工具 ### [Ettercap](https://github.com/Ettercap/ettercap) Ettercap 是个中间人攻击的工具集,具有实时连接嗅探、内容过滤以及其他特性 ### [FakeDns](https://github.com/Crypt0s/FakeDns) Python 实现的基于正则表达式的 DNS 中间人服务器,支持 DNS 重绑定攻击 ### [hyperfox](https://github.com/malfunkt/hyperfox) 具有实时 TLS 证书生成功能的 HTTP/HTTPs 中间人代理与流量记录工具 ### [mallory](https://github.com/intrepidusgroup/mallory) 被设计作为网关运行的一个可扩展 TCP/UDP 中间人代理工具 ### [MITMf](https://github.com/byt3bl33d3r/MITMf) 中间人攻击框架 ### [mitmproxy](https://github.com/mitmproxy/mitmproxy) 为渗透测试人员与软件开发者设计的交互式、支持 TLS、可拦截的 HTTP 代理工具 ### [node-http-mitm-proxy](https://github.com/joeferner/node-http-mitm-proxy) node.js 编写的 HTTP 中间人攻击代理工具 ### [postgres-mitm](https://github.com/thusoy/postgres-mitm) 测试你的 Postgres 连接是否易受中间人攻击 ### [tiny-mitm-proxy](https://github.com/floyd-fuh/tiny-mitm-proxy) 可能是最小的 SSL 中间人代理工具 ### [Seth](https://github.com/SySS-Research/Seth) 在 RDP 连接中执行中间人攻击,并提取明文凭据 ### [ssh-mitm](https://github.com/jtesta/ssh-mitm) SSH 中间人攻击工具 ### [sslsniff](https://github.com/moxie0/sslsniff) 自动 SSL 中间人攻击工具 ### [tornado](https://github.com/rebellionil/tornado) 中间人工具一锅出 ### [warcprox](https://github.com/internetarchive/warcprox) 基于 pymiproxy 的 HTTP/S 中间人代理 ### [websploit](https://github.com/websploit/websploit) 一个高级中间人框架 ### [wssip](https://github.com/nccgroup/wssip) 用于在客户端与服务器间,捕获、修改、发送自定义 WebSocket 数据的应用程序 ## 其他 ### [mitmAP](https://github.com/xdavidhu/mitmAP) 用于创建虚假 AP 并嗅探数据的 Python 程序 ### [mitm-vm](https://github.com/praetorian-inc/mitm-vm) 易部署、提供各种中间人攻击工具的虚拟机 ### [sshhipot](https://github.com/magisterquis/sshhipot) 高交互 SSH 中间人蜜罐 ### [suddensix](https://github.com/Neohapsis/suddensix) IPV6 中间人攻击工具 ## 完善项目 帮助我们完善项目请查看 [contributing.md](contributing.md) ================================================ FILE: contributing.md ================================================ # Contribution Guidelines Please follow the instructions below to make a contribution. This resource was made by and made to developers and hackers alike! I appreciate and recognize all [contributors](#contributors). ## Table of Content - [Adding to the list](#adding-to-the-list) - [To remove from the list](#to-remove-from-the-list) - [Contributors](#contributors) ## Adding to the List - Please add the content to the `README.md` file and make sure that the edited list is in alphabetical order. - Submit a pull request. ## Removing from the List - If you have any issues accessing any of the resources listed here, please let me know. ## Contributors - [Chandrapal](https://github.com/Chan9390) - [Aan](https://github.com/aancw) - [NeverMine17](https://github.com/NeverMine17)