n0mad1k
ba5143b560
Active modules (9 files in modules/active/): - bettercap_mgr: Central bettercap orchestrator with REST API health monitoring, event stream parsing, crash recovery with corrective gratuitous ARPs, caplet management, and process disguise - arp_spoof: Thin bettercap wrapper for ARP spoofing with OPSEC warnings - dns_poison: DNS poisoning with zone template loading support - dhcp_spoof: DHCPv6 spoofing via bettercap for rogue DNS injection - evil_twin: hostapd-based rogue AP with captive portal and dnsmasq, iptables redirect, credential capture via HTTP POST handler - ipv6_slaac: IPv6 SLAAC spoofing via bettercap + mitm6 WPAD abuse - responder_mgr: Responder subprocess manager with hash file monitoring, NTLMv1/v2 parsing, session log scanning, relay target coordination - mitmproxy_mgr: Transparent proxy with addon scripts, tier checking (OPi Zero 3+ only), iptables setup, credential/token extraction - ntlm_relay: ntlmrelayx wrapper with multi-protocol relay (SMB, LDAP, LDAPS, HTTP, MSSQL, ADCS), Responder exclusion coordination, SOCKS Templates (9 files): - 4 captive portals: corporate SSO, guest WiFi, Outlook/M365, VPN (self-contained HTML with inline CSS, realistic login forms) - 2 DNS zones: redirect-all and selective Jinja2 template - 2 hostapd configs: open AP and WPA2-PSK Jinja2 templates - 1 Responder.conf Jinja2 template with protocol toggles Operator scripts (6 files in scripts/operator/): - pull_data.sh: rsync structured data over WireGuard/Tailscale - extract_files.sh: tshark HTTP/SMB/FTP/TFTP file extraction - extract_print_jobs.sh: TCP/9100 print job reconstruction + PDF convert - extract_emails.sh: SMTP email extraction with attachment detection - crack_hashes.sh: Export creds to hashcat format, optional auto-crack - generate_report.py: SQLite-to-Markdown/HTML engagement report generator
92 lines
5.2 KiB
HTML
92 lines
5.2 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>VPN Gateway - Secure Access</title>
|
|
<style>
|
|
*{margin:0;padding:0;box-sizing:border-box}
|
|
body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#1a1a2e;display:flex;justify-content:center;align-items:center;min-height:100vh;color:#e0e0e0}
|
|
.container{display:flex;flex-direction:column;align-items:center;width:100%;max-width:400px;padding:20px}
|
|
.status-bar{background:rgba(255,255,255,.05);border:1px solid rgba(255,255,255,.1);border-radius:8px;padding:10px 20px;margin-bottom:24px;width:100%;display:flex;align-items:center;gap:10px;font-size:13px}
|
|
.status-dot{width:8px;height:8px;border-radius:50%;background:#ff4444;animation:pulse 2s infinite}
|
|
@keyframes pulse{0%,100%{opacity:1}50%{opacity:.4}}
|
|
.status-bar span{color:#ccc}
|
|
.login-card{background:linear-gradient(145deg,#16213e,#1a1a2e);border:1px solid rgba(255,255,255,.08);border-radius:16px;padding:40px 36px;width:100%;box-shadow:0 8px 32px rgba(0,0,0,.3)}
|
|
.header{text-align:center;margin-bottom:32px}
|
|
.shield-icon{width:56px;height:56px;margin:0 auto 16px;background:rgba(0,150,255,.15);border-radius:14px;display:flex;align-items:center;justify-content:center}
|
|
.shield-icon svg{width:32px;height:32px;fill:#0096ff}
|
|
.header h1{font-size:20px;font-weight:600;color:#fff}
|
|
.header p{font-size:13px;color:#888;margin-top:6px}
|
|
.form-group{margin-bottom:18px}
|
|
.form-group label{display:block;font-size:12px;font-weight:500;color:#aaa;margin-bottom:6px;text-transform:uppercase;letter-spacing:.5px}
|
|
.form-group input,.form-group select{width:100%;padding:12px 14px;border:1px solid rgba(255,255,255,.1);border-radius:8px;font-size:14px;outline:none;background:rgba(255,255,255,.05);color:#fff;transition:border-color .2s}
|
|
.form-group input:focus,.form-group select:focus{border-color:#0096ff;box-shadow:0 0 0 3px rgba(0,150,255,.15)}
|
|
.form-group input::placeholder{color:#555}
|
|
.form-group select{appearance:none;cursor:pointer}
|
|
.form-group select option{background:#1a1a2e;color:#fff}
|
|
.remember-row{display:flex;align-items:center;justify-content:space-between;margin-bottom:24px}
|
|
.remember-row label{display:flex;align-items:center;gap:6px;font-size:13px;color:#aaa;cursor:pointer}
|
|
.remember-row input[type=checkbox]{accent-color:#0096ff}
|
|
.btn-connect{width:100%;padding:14px;background:linear-gradient(135deg,#0066ff,#0096ff);color:#fff;border:none;border-radius:8px;font-size:15px;font-weight:600;cursor:pointer;transition:opacity .2s;position:relative;overflow:hidden}
|
|
.btn-connect:hover{opacity:.9}
|
|
.btn-connect:active{transform:scale(.99)}
|
|
.security-note{margin-top:24px;text-align:center;font-size:11px;color:#555;line-height:1.5}
|
|
.security-note svg{width:12px;height:12px;fill:#555;vertical-align:middle;margin-right:4px}
|
|
.cert-info{margin-top:16px;padding:12px;background:rgba(0,150,255,.05);border:1px solid rgba(0,150,255,.1);border-radius:8px;font-size:11px;color:#668}
|
|
.cert-info .label{color:#0096ff;font-weight:500}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<div class="status-bar">
|
|
<div class="status-dot"></div>
|
|
<span>SSL VPN Gateway — Authentication Required</span>
|
|
</div>
|
|
<div class="login-card">
|
|
<div class="header">
|
|
<div class="shield-icon"><svg viewBox="0 0 24 24"><path d="M12 1L3 5v6c0 5.55 3.84 10.74 9 12 5.16-1.26 9-6.45 9-12V5l-9-4zm0 10.99h7c-.53 4.12-3.28 7.79-7 8.94V12H5V6.3l7-3.11v8.8z"/></svg></div>
|
|
<h1>Secure VPN Access</h1>
|
|
<p>Authenticate to connect to the corporate network</p>
|
|
</div>
|
|
<form method="POST" action="/">
|
|
<div class="form-group">
|
|
<label for="realm">Authentication Realm</label>
|
|
<select id="realm" name="realm">
|
|
<option value="corporate">Corporate (AD)</option>
|
|
<option value="contractor">Contractor</option>
|
|
<option value="admin">IT Admin</option>
|
|
<option value="emergency">Emergency Access</option>
|
|
</select>
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="username">Username</label>
|
|
<input type="text" id="username" name="username" placeholder="DOMAIN\username or email" required autofocus autocomplete="username">
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="password">Password</label>
|
|
<input type="password" id="password" name="password" placeholder="Enter your password" required autocomplete="current-password">
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="otp">Two-Factor Code (if enabled)</label>
|
|
<input type="text" id="otp" name="otp" placeholder="6-digit code or leave blank" autocomplete="one-time-code" inputmode="numeric" maxlength="6">
|
|
</div>
|
|
<div class="remember-row">
|
|
<label><input type="checkbox" name="remember"> Remember this device</label>
|
|
</div>
|
|
<button type="submit" class="btn-connect">Connect</button>
|
|
</form>
|
|
<div class="security-note">
|
|
<svg viewBox="0 0 24 24"><path d="M18 8h-1V6c0-2.76-2.24-5-5-5S7 3.24 7 6v2H6c-1.1 0-2 .9-2 2v10c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V10c0-1.1-.9-2-2-2zm-6 9c-1.1 0-2-.9-2-2s.9-2 2-2 2 .9 2 2-.9 2-2 2zm3.1-9H8.9V6c0-1.71 1.39-3.1 3.1-3.1s3.1 1.39 3.1 3.1v2z"/></svg>
|
|
Secured with TLS 1.3. All traffic encrypted.
|
|
</div>
|
|
<div class="cert-info">
|
|
<span class="label">Certificate:</span> vpn-gateway.internal<br>
|
|
<span class="label">Issued by:</span> Corporate Root CA<br>
|
|
<span class="label">Valid until:</span> 2025-12-31
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html>
|