This is the pythonic version of FormHunter.
Small command line tool for HTTP Post (Web forms, like login forms) interception written in Python. This tool by itself only sniffs your own machine network traffic but you can perform an arpspoof attack (using another tools) to intercept and look for HTTP Posts in all the local network traffic.
All requeriments are listed on requirements.txt and can be installed with pip by running:
$ pip install -r requirements.txtThe command line receives one required argument and one optional argument: python main.py -i <IFACE> -f <Comma,separated,form,input,names,to,filter>, eg.:
$ python main.py -i eth0or filtering form inputs that contains the words user or password:
$ python main.py -i eth0 -f user,password- This program does not support HTTPs packets capture although its support should be easy to implement (perfoming an SSLStrip attack).
MIT