MITMf aims to provide a one-stop-shop for Man-In-The-Middle and network attacks while updating and improving existing attacks and techniques. Originally built to address the significant shortcomings of other tools (e.g Ettercap, Mallory), it's been almost completely rewritten from scratch to provide a modular and easily extendible framework that anyone can use to implement their own MITM attack. The framework contains a built-in SMB, HTTP and DNS server that can be controlled and used by the various plugins, it also contains a modified version of the SSLStrip proxy that allows for HTTP modification and a partial HSTS bypass. As of version 0.9.8, MITMf supports active packet filtering and manipulation (basically what better filters did, only better), allowing users to modify any type of traffic or protocol. The configuration file can be edited on-the-fly while MITMf is running, the changes will be passed down through the framework.
Features
- The framework contains a built-in SMB, HTTP and DNS
- As of version 0.9.8, MITMf supports active packet filtering and manipulation
- The configuration file can be edited on-the-fly while MITMf is running
- MITMf will capture FTP, IRC, POP, IMAP, Telnet, SMTP, SNMP
- Responder integration allows for LLMNR, NBT-NS and MDNS poisoning and WPAD rogue server support
- You can now modify any packet/protocol that gets intercepted by MITMf
Project Samples
