client detection [extention feature]
Hello. The current extension engine is heavily focused on raw packages (mon0). But how can we automate victim interactions at the application level? After all, most vulnerabilities are at this level. Each client that connects to us again may have some kind of vulnerability (ms17-010, bluekeep, etc) or misconfiguration (ip forward, bruteforce, etc); it would also be a good idea to do enum (nmap, nmblookup, etc). I can't figure out if it's real to do this? In my little karma attack tool, I implemented this in an extremely simple and effective way - through events (https://github.com/s0i37/karma/tree/main/on_client https://github.com/s0i37/karma/tree/main/on_network). Maybe we should do something similar here?
Another question - is it worth doing this through Python coding as it is now, or is it easier to use external scripts with certain prototypes? After all, with external scripts it will be much easier and faster to expand attacks with dozens of different tools.
Source: wifiphisher/wifiphisher