20e7eb343d
Templated from cam-mitm. The camera-specific code (UBox cloud client, CVE verifiers, OAM HMAC signing, fuzzer wordlists) is removed; what's left is the generic core: ARP spoof, DNS spoof, HTTP/HTTPS interception with peek-before-wrap, raw sniffer with conntrack-based original-dst lookup, protocol fingerprinting, intruder detection, packet injection, log rotation, PyQt6 GUI on top of a service Controller. All 'camera' references renamed to 'target' throughout. Configuration moved into ~/.config/setec-mitm/config.json with the Settings tab as the primary editor. Plugin system at targets/<name>/plugin.py for vendor-specific code. See README.md for full setup, plugin authoring, and troubleshooting. Co-authored by Setec Labs.
66 lines
1.4 KiB
Bash
Executable File
66 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
if [[ $EUID -ne 0 ]]; then
|
|
echo "must run as root (use sudo)" >&2
|
|
exit 1
|
|
fi
|
|
|
|
ROOT_DIR=/root/dumps/mitm_logs
|
|
SNAKE_DIR=/home/snake/dumps/mitm_logs
|
|
mkdir -p "$ROOT_DIR" "$SNAKE_DIR"
|
|
|
|
CERT="$ROOT_DIR/mitm_cert.pem"
|
|
KEY="$ROOT_DIR/mitm_key.pem"
|
|
|
|
CFG=$(mktemp)
|
|
trap 'rm -f "$CFG"' EXIT
|
|
|
|
cat > "$CFG" <<'EOF'
|
|
[req]
|
|
distinguished_name = dn
|
|
req_extensions = v3_req
|
|
x509_extensions = v3_req
|
|
prompt = no
|
|
|
|
[dn]
|
|
CN = portal.ubianet.com
|
|
O = Ubia
|
|
C = US
|
|
|
|
[v3_req]
|
|
basicConstraints = CA:FALSE
|
|
keyUsage = digitalSignature, keyEncipherment
|
|
extendedKeyUsage = serverAuth
|
|
subjectAltName = @alt
|
|
|
|
[alt]
|
|
DNS.1 = portal.ubianet.com
|
|
DNS.2 = api.us.ubianet.com
|
|
DNS.3 = api.cn.ubianet.com
|
|
DNS.4 = *.ubianet.com
|
|
DNS.5 = *.aliyuncs.com
|
|
DNS.6 = *.oss-cn-shenzhen.aliyuncs.com
|
|
DNS.7 = *.myqcloud.com
|
|
IP.1 = 192.168.1.172
|
|
EOF
|
|
|
|
openssl req -x509 -newkey rsa:2048 -nodes -days 3650 \
|
|
-keyout "$KEY" -out "$CERT" -config "$CFG" -extensions v3_req
|
|
|
|
chmod 644 "$CERT"
|
|
chmod 600 "$KEY"
|
|
|
|
cp "$CERT" "$SNAKE_DIR/mitm_cert.pem"
|
|
cp "$KEY" "$SNAKE_DIR/mitm_key.pem"
|
|
chown snake:snake "$SNAKE_DIR/mitm_cert.pem" "$SNAKE_DIR/mitm_key.pem"
|
|
chmod 644 "$SNAKE_DIR/mitm_cert.pem"
|
|
chmod 600 "$SNAKE_DIR/mitm_key.pem"
|
|
|
|
echo
|
|
echo "=== wrote ==="
|
|
ls -l "$CERT" "$KEY" "$SNAKE_DIR/mitm_cert.pem" "$SNAKE_DIR/mitm_key.pem"
|
|
echo
|
|
echo "=== subject + SANs ==="
|
|
openssl x509 -in "$CERT" -noout -text | grep -E "Subject:|DNS:|IP Address:"
|