红队测试-代理和中间人攻击工具

• BetterCAP - Modular, portable and easily extensible MITM framework.
• Ettercap - Comprehensive, mature suite for machine-in-the-middle attacks.
• Habu - Python utility implementing a variety of network attacks, such as ARP poisoning, DHCP starvation, and more.
• Lambda-Proxy - Utility for testing SQL Injection vulnerabilities on AWS Lambda serverless functions.
• MITMf - Framework for Man-In-The-Middle attacks.
• Morpheus - Automated ettercap TCP/IP Hijacking tool.
• SSH MITM - Intercept SSH connections with a proxy; all plaintext passwords and sessions are logged to disk.
• dnschef - Highly configurable DNS proxy for pentesters.
• evilgrade - Modular framework to take advantage of poor upgrade implementations by injecting fake updates.
• mallory - HTTP/HTTPS proxy over SSH.
• mitmproxy - Interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
• oregano - Python module that runs as a machine-in-the-middle (MITM) accepting Tor client requests.
• sylkie - Command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol.