Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Close issue #94: Fixing contact info. #96

Merged
merged 2 commits into from
Jan 24, 2019
Merged

Close issue #94: Fixing contact info. #96

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9de9190
Close issue #94: Fixing contact info.
Sep 19, 2018
22179b3
Version uptick
strictlymike Jan 24, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 7 additions & 2 deletions CHANGELOG.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
Version 1.4.2
-------------
* Updated contact information
* Whitespace wrangling

Version 1.4.1
-------------
* Syslog support
Expand All @@ -22,7 +27,7 @@ Version 1.3
* Protocol autodetection (thanks Matthew Haigh)
* Security: fix for path traversal vulnerability (thanks Cody Pierce and Antony Saba)
* Randomized banner generation (thanks Michael Bailey!)
* Listener: BITS protocol support
* Listener: BITS protocol support (thanks Peter Kacherginsky)
* Various bug fixes


Expand All @@ -46,4 +51,4 @@ Version 1.1
Version 1.0
-----------

* Initial release
* Initial Windows release by Peter Kacherginsky
2 changes: 1 addition & 1 deletion LICENSE.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -175,7 +175,7 @@

END OF TERMS AND CONDITIONS

Copyright 2016 Peter Kacherginsky
Copyright (C) 2018 FireEye, Inc.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
Expand Down
140 changes: 68 additions & 72 deletions README.md
View file
Open in desktop

Large diffs are not rendered by default.

20 changes: 10 additions & 10 deletions fakenet/defaultFiles/FakeNet.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,33 +5,33 @@

<body>
<b><pre>
______ _ ________ _ _ ______ _______ _ _ _____
______ _ ________ _ _ ______ _______ _ _ _____
| ____/\ | |/ / ____| \ | | ____|__ __| | \ | |/ ____|
| |__ / \ | ' /| |__ | \| | |__ | |______| \| | | __
| |__ / \ | ' /| |__ | \| | |__ | |______| \| | | __
| __/ /\ \ | < | __| | . ` | __| | |______| . ` | | |_ |
| | / ____ \| . \| |____| |\ | |____ | | | |\ | |__| |
|_|/_/ \_\_|\_\______|_| \_|______| |_| |_| \_|\_____|

H T T P L I S T E N E R
H T T P L I S T E N E R
</pre></b>

<p>FakeNet-NG is a next generation dynamic network analysis tool for malware
analysts and penetration testers. It is open source and designed for the latest
analysts and penetration testers. It is open source and designed for the latest
versions of Windows.</p>

<p>The tool allows you to intercept and redirect all or specific network traffic
<p>The tool allows you to intercept and redirect all or specific network traffic
while simulating legitimate network services. Using FakeNet-NG, malware analysts
can quickly identify malware's functionality and capture network signatures.
Penetration testers and bug hunters will find FakeNet-NG's configurable
interception engine and modular framework highly useful when testing
can quickly identify malware's functionality and capture network signatures.
Penetration testers and bug hunters will find FakeNet-NG's configurable
interception engine and modular framework highly useful when testing
application's specific functionality and prototyping PoCs.</p>

<p>FakeNet-NG is based on the excellent Fakenet tool developed
by Andrew Honig and Michael Sikorski.</p>

<h3>Contact</h3>

For bugs, crashes, or other comments please contact <b>Peter Kacherginsky</b> by email
<b>peter.kacherginsky@fireeye.com</b> or Twitter <b>@_iphelix</b>.
For bugs, crashes, or other comments please contact <b>The FLARE Team</b> by email
<b>FakeNet@fireeye.com</b>.
</body>
</html>
8 changes: 4 additions & 4 deletions fakenet/defaultFiles/FakeNet.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
______ _ ________ _ _ ______ _______ _ _ _____
______ _ ________ _ _ ______ _______ _ _ _____
| ____/\ | |/ / ____| \ | | ____|__ __| | \ | |/ ____|
| |__ / \ | ' /| |__ | \| | |__ | |______| \| | | __
| |__ / \ | ' /| |__ | \| | |__ | |______| \| | | __
| __/ /\ \ | < | __| | . ` | __| | |______| . ` | | |_ |
| | / ____ \| . \| |____| |\ | |____ | | | |\ | |__| |
|_|/_/ \_\_|\_\______|_| \_|______| |_| |_| \_|\_____|

H T T P L I S T E N E R
H T T P L I S T E N E R
FakeNet-NG is a next generation dynamic network analysis tool for malware analysts and penetration testers. It is open source and designed for the latest versions of Windows.

The tool allows you to intercept and redirect all or specific network traffic while simulating legitimate network services. Using FakeNet-NG, malware analysts can quickly identify malware's functionality and capture network signatures. Penetration testers and bug hunters will find FakeNet-NG's configurable interception engine and modular framework highly useful when testing application's specific functionality and prototyping PoCs.
Expand All @@ -14,4 +14,4 @@ FakeNet-NG is based on the excellent Fakenet tool developed by Andrew Honig and

Contact

For bugs, crashes, or other comments please contact Peter Kacherginsky by email peter.kacherginsky@fireeye.com or Twitter @_iphelix.
For bugs, crashes, or other comments please contact the FLARE Team by email FakeNet@fireeye.com
19 changes: 10 additions & 9 deletions fakenet/fakenet.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,8 @@
# FakeNet-NG is a next generation dynamic network analysis tool for malware
# analysts and penetration testers.
#
# Developed by Peter Kacherginsky
# Original developer: Peter Kacherginsky
# Current developer: FireEye FLARE Team (FakeNet@fireeye.com)

import logging
import logging.handlers
Expand Down Expand Up @@ -150,7 +151,7 @@ def start(self):

if self.diverter_config['networkmode'].lower() == 'auto':
self.diverter_config['networkmode'] = 'singlehost'

from diverters.windows import Diverter
self.diverter = Diverter(self.diverter_config, self.listeners_config, ip_addrs, self.logging_level)

Expand Down Expand Up @@ -206,14 +207,14 @@ def start(self):

for listener in self.running_listener_providers:

# Only listeners that implement acceptListeners(listeners)
# Only listeners that implement acceptListeners(listeners)
# interface receive running_listener_providers
try:
listener.acceptListeners(self.running_listener_providers)
except AttributeError:
self.logger.debug("acceptListeners() not implemented by Listener %s" % listener.name)

# Only listeners that implement acceptDiverter(diverter)
# Only listeners that implement acceptDiverter(diverter)
# interface receive diverter
try:
listener.acceptDiverter(self.diverter)
Expand All @@ -232,7 +233,7 @@ def stop(self):

def get_ips(ipvers):
"""Return IP addresses bound to local interfaces including loopbacks.

Parameters
----------
ipvers : list
Expand Down Expand Up @@ -266,17 +267,17 @@ def get_ips(ipvers):
def main():

print """
______ _ ________ _ _ ______ _______ _ _ _____
______ _ ________ _ _ ______ _______ _ _ _____
| ____/\ | |/ / ____| \ | | ____|__ __| | \ | |/ ____|
| |__ / \ | ' /| |__ | \| | |__ | |______| \| | | __
| |__ / \ | ' /| |__ | \| | |__ | |______| \| | | __
| __/ /\ \ | < | __| | . ` | __| | |______| . ` | | |_ |
| | / ____ \| . \| |____| |\ | |____ | | | |\ | |__| |
|_|/_/ \_\_|\_\______|_| \_|______| |_| |_| \_|\_____|

Version 1.4.1
Version 1.4.2
_____________________________________________________________
Developed by FLARE Team
_____________________________________________________________
_____________________________________________________________
"""

# Parse command line arguments
Expand Down
10 changes: 5 additions & 5 deletions setup.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,18 +23,18 @@

setup(
name='FakeNet NG',
version='1.3',
version='1.4.2',
description="",
long_description="",
author="Peter Kacherginsky",
author_email='peter.kacherginsky@fireeye.com',
author="FireEye FLARE Team with credit to Peter Kacherginsky as the original developer",
author_email='FakeNet@fireeye.com',
url='https://www.github.com/fireeye/flare-fakenet-ng',
packages=[
'fakenet',
],
package_dir={'fakenet': 'fakenet'},
package_data={'fakenet': ['*.pem','diverters/*.py', 'listeners/*.py',
'listeners/ssl_utils/*.py', 'listeners/ssl_utils/*.pem', 'configs/*.ini', 'defaultFiles/*',
package_data={'fakenet': ['*.pem','diverters/*.py', 'listeners/*.py',
'listeners/ssl_utils/*.py', 'listeners/ssl_utils/*.pem', 'configs/*.ini', 'defaultFiles/*',
'lib/64/*', 'lib/32/*']},
entry_points={
"console_scripts": [
Expand Down