https://github.com/daniel4x/mitm-python

A simple as possible man in the middle written in python using scapy
https://github.com/daniel4x/mitm-python

arp hacking libdnet mitm network poisoning pyhton scapy wireless

Last synced: about 2 months ago
JSON representation

A simple as possible man in the middle written in python using scapy

• Host: GitHub
• URL: https://github.com/daniel4x/mitm-python
• Owner: daniel4x
• Created: 2017-05-26T15:49:17.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2019-01-17T12:54:44.000Z (almost 6 years ago)
• Last Synced: 2024-08-03T17:11:13.267Z (5 months ago)
• Topics: arp, hacking, libdnet, mitm, network, poisoning, pyhton, scapy, wireless
• Language: Python
• Size: 75.2 KB
• Stars: 9
• Watchers: 0
• Forks: 2
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-network-stuff - **10**星

README

        
# mitm-python

A keep it simple project demonstrate how to perform a man in the middle attack with python + scapy.

![alt text]( docs/Man_in_the_Middle.jpg "mitm attack jpg")

## Requirements:

- Python version 2.7.13 (recommended), or above ...

- It's recommended to use python virtual env in order to organize the project and manage your dependencies. 

- dependencies: 


Python fire for command line interface: `pip install fire`


Scapy: `pip install scapy` 


libdnet: from git source: `git https://github.com/dugsong/libdnet` or from there's [official site](http://libdnet.sourceforge.net/).

If you are using git source then compile and run with `./configure && make` and the install the model using `python setup.py install`, setup.py can be found at the python directory in libdnet.

## Running:

`python app.py -h` - show help


`python app.py target_ip router_ip interface` - run the attack 


Example:


`python app.py 192.168.1.39 192.168.1.1 en0` - en0 is the default interface for OS X.

Remember:exclamation: the script only using arp poisoning in order to "steal" the session between your target and some access point.

You may want to use Wireshark to inspect the target traffic or different tools for getting passwords or forging cookies for stealing sessions.

:exclamation: This script made for learning purpose :exclamation: