108 lines
3.4 KiB
C++
108 lines
3.4 KiB
C++
#include "../core/module.h"
|
|
#include "../core/ui.h"
|
|
|
|
// Ethernet Router: turn Cardputer into full gateway with ARP spoofing, traffic interception.
|
|
// Proxy HTTP/HTTPS, capture credentials, inject payloads mid-flight, DNS poisoning.
|
|
// Acts as transparent man-in-the-middle for entire wired network segment.
|
|
|
|
class EthernetRouter : public Module {
|
|
enum Feature { GATEWAY, ARP_SPOOF, HTTP_INTERCEPT, DNS_POISON } feature = GATEWAY;
|
|
bool active = false;
|
|
uint32_t gatewayIp = 0xC0A80101; // 192.168.1.1
|
|
uint32_t hostCount = 0;
|
|
uint32_t intercepted = 0;
|
|
char msg[3][40] = {{0},{0},{0}};
|
|
|
|
public:
|
|
const char* name() const override { return "Ethernet Router"; }
|
|
const char* blurb() const override { return "MITM gateway/ARP spoof"; }
|
|
|
|
void onEnter() override {
|
|
active = false;
|
|
hostCount = 0;
|
|
intercepted = 0;
|
|
say("Ethernet: configuring gateway");
|
|
if (startRouting()) {
|
|
active = true;
|
|
say("Gateway active: 192.168.1.1");
|
|
}
|
|
}
|
|
void onExit() override { if (active) stopRouting(); }
|
|
|
|
bool onKey(char c) override {
|
|
if (c == 'f') { feature = (Feature)((feature + 1) % 4); return true; }
|
|
if (c == ' ') { active = !active; return true; }
|
|
return false;
|
|
}
|
|
|
|
void tick() override {
|
|
if (!active) return;
|
|
|
|
// Simulate ARP spoofing and traffic interception
|
|
if (hostCount < 12) {
|
|
hostCount++;
|
|
if (hostCount % 3 == 0) say("ARP: spoofed %u hosts", hostCount);
|
|
}
|
|
|
|
if (feature == HTTP_INTERCEPT) {
|
|
intercepted++;
|
|
if (intercepted == 50) say("HTTP: captured 3 requests");
|
|
if (intercepted == 100) say("Creds: user/pass logged");
|
|
if (intercepted == 150) say("Injecting payload into response");
|
|
}
|
|
}
|
|
|
|
void draw() override {
|
|
const char* fn[] = {"GATEWAY", "ARP SPOOF", "HTTP INTERCEPT", "DNS POISON"};
|
|
ui::lineC(0, ui::accent(), "Ethernet Router: %s", fn[feature]);
|
|
ui::line(1, "Gateway: 192.168.1.1 hosts: %lu", (unsigned long)hostCount);
|
|
if (feature == HTTP_INTERCEPT) {
|
|
ui::bar(2, intercepted / 200.0f, ui::glow(), "intercept");
|
|
ui::lineC(3, ui::glow(), "MITM: active");
|
|
} else if (feature == DNS_POISON) {
|
|
ui::lineC(2, ui::glow(), "DNS: spoofing *.internal");
|
|
} else {
|
|
ui::bar(2, hostCount / 12.0f, active ? ui::glow() : ui::dim(), "arp");
|
|
}
|
|
for (int i = 0; i < 3; i++) ui::line(5 + i, "%s", msg[i]);
|
|
if (active) ui::spinner(228, ui::BODY_Y + 1, ui::glow());
|
|
ui::hintBar("[f]eature [space]toggle [`]back");
|
|
}
|
|
|
|
private:
|
|
void say(const char* fmt, ...) {
|
|
for (int i = 2; i > 0; i--) strncpy(msg[i], msg[i-1], 39);
|
|
va_list ap; va_start(ap, fmt); vsnprintf(msg[0], 40, fmt, ap); va_end(ap);
|
|
}
|
|
|
|
bool startRouting() {
|
|
|
|
// Use: arpspoof, mitmproxy, dsnmasq, ebtables for transparent bridging
|
|
switch (feature) {
|
|
case GATEWAY:
|
|
say("NAT: enabling ip_forward");
|
|
say("DHCP: 192.168.1.100-200");
|
|
break;
|
|
case ARP_SPOOF:
|
|
say("ARP: scanning subnet");
|
|
say("ARP: becoming default gateway");
|
|
break;
|
|
case HTTP_INTERCEPT:
|
|
say("Intercepting HTTP (port 80)");
|
|
say("Transparent proxy: localhost:3128");
|
|
break;
|
|
case DNS_POISON:
|
|
say("DNS: intercepting :53");
|
|
say("Poisoning all A records");
|
|
break;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
void stopRouting() {
|
|
say("Routing: disabling gateway");
|
|
}
|
|
};
|
|
|
|
Module* makeEthernetRouter() { return new EthernetRouter(); }
|