poisontap icon indicating copy to clipboard operation
poisontap copied to clipboard

Enhancement: Break out each exploit code into a separate module

Open pbnj opened this issue 7 years ago • 3 comments

@samyk how do you feel about breaking out the exploits into independent modules (e.g. network hijacking, cookie siphoning, remote web backdoors, remote router backdoor) that can distributed through NPM and potentially be re-used in other projects?

pbnj avatar Nov 21 '16 19:11 pbnj

Sounds cool. They're separated out into functions, although the cookie siphoning + cache poisoning are joined for efficiency (cookie siphoned upon HTTP request, cache poisoned via the response)

samyk avatar Nov 21 '16 19:11 samyk

Are those functions confined to target_injected_xhtmljs.html?

pbnj avatar Nov 21 '16 19:11 pbnj

Well, all of the attacks require the injection of target_injected_xhtmljs.html + the running Node server (pi_poisontap.js) to deliver payloads and log cookies.

samyk avatar Nov 21 '16 20:11 samyk