Injection / MITM

Network

• Responder
• sniffglue
  • packet sniffer
  • tcpdump alternative?
• rshijack
  • tcp connection hijacker
• mitm6
  • Reply to DHCPv6 messages -> become the DNS nameserver -> hijack DNS responses
  • Need to read more
• BPF
  • Writing BPF code in Rust
  • redbpf

Web

• mitmproxy
  • HTTP proxy
• mitmproxy2swagger
  • Convert mitmproxy captures to Swagger
• goproxy
  • HTTP proxy library for Go
• Extracting Clear-Text Credentials Directly From Chromium's Memory
  • Remediation here. It's not impossible, but quite annoying for a couple vectors.

Implants

TODO: I feel like some other pages have implants that should be migrated here...

• TeamsImplant