Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [mitmf]

MITMf is a Python framework for Man-In-The-Middle attacks.

Filter by
Sorted by
Tagged with
0 votes
1 answer
120 views

Misuse of trusted certificate authority [duplicate]

Currently I'm working with mitmproxy and intercepting some HTTPs traffic using it. Before I could use it in my browser, I had to trust the certificate via my OS settings. After that, the certificate ...
TrueStar's user avatar
-1 votes
1 answer
153 views

Strong TLS parameters even though MITM is being performed

I am performing a MITM attack against my own network using bettercap and https proxy. On my client-side I use the Google Chrome browser and navigate to https://webs.com At the same time I use a script ...
user1235's user avatar
0 votes
1 answer
804 views

Does SSLSTRIP in MITMF only works when the victim visits for the first time?

I just started learning MITM attacks and I use MITMF to perfom these attacks. I have one question regarding to sslstrip. I notice that sslstrip only works when we first clear the cache and history in ...
Andi Perkaa's user avatar
0 votes
1 answer
868 views

How to implement an active Man-In-The-Middle attack that changes the request URL address

For training purposes, I need some pointers on the tools and tips to implement an active Man-In-The-Middle attack. The attack scenario that I want to do is a toy example (which has countermeasures ...
user9371654's user avatar
0 votes
1 answer
842 views

MITMF Is not connecting Metasploit (HTTP Injection)

I am attempting to inject malicious payload into http request. I own a personal lamp server, a Kali VM and a the most WindowsXP VM imaginable. and everything is on my network and legal. I have been ...
user21303's user avatar
  • 163
1 vote
2 answers
2k views

How to stop the "mitmf" tool on my home network?

Okay, so I am basically an electronics student so I have limited knowledge on the subject. So please help me out here. The thing is that one day, as I was browsing, I opened up Google and instead ...
Swastik Mohapatra's user avatar
4 votes
1 answer
761 views

Stop DNSSpoof after login

Preface: I had an argument with a buddy the other day, he said it was impossible I disagreed. So say I have a large network of computers all visiting the same website for some reason. Then I have a ...
Creg's user avatar
  • 71
1 vote
2 answers
734 views

MITMf as a Transparent Proxy?

Is it possible to use MITMf to sniff as a transparent proxy? If I connect to this proxy I would want to see my real IP, not the server IP. If possible, how can I do it? I found this file "...
johnmet's user avatar
  • 11
1 vote
1 answer
3k views

MITMf arp spoofing inconsistent

using MITMf I'm getting inconsistent results, sometimes it just works, other times it just doesn't... I'm wondering is it like that for others or am I doing something wrong? the command I'm using ...
Reed Jones's user avatar
1 vote
2 answers
3k views

Replacing images on HTTPS sites with MITMf?

I'm using MITMf for replacing images over HTTP, and everything works fine. But how can I replace images on sites like Google or Facebook that uses HTTPS? My actual command: sudo python mitmf.py -i ...
KDev's user avatar
  • 13
1 vote
1 answer
394 views

How does mitmf-filepwn implement dns-spoofing?

While running the following command in Kali mitmf -i eth0 --arp --spoof --gateway 192.168.1.1 --target 192.168.1.4 --filepwn i have noticed that in latest chrome, when i typed google.gr the result was ...
mpla_mpla's user avatar
  • 281
3 votes
1 answer
466 views

MITMf which files can it patch

From this tutorial i found that it is possible using tool MITMf to patch exe files ''victim'' downloads in order to open a meterpreter shell. The commands that have been used are the following: use ...
mpla_mpla's user avatar
  • 281