mitm-framework

Simulation, Training and Red Team Phishing Framework

Curated List of MitM frameworks on GitHub

Refluxion -- MITM WPA attacks tool

This is a python based command line Network Scanner utility, which takes input as an argument for the exact IP address or the relative IP Address range you wish to do the Network Scan for and returns all the available IP addresses with their MAC addresses on your current Network.

Venom is an ARP-Poisoner that sniffs TLS requests to take advantage of SNI Leak and display all targets DNS traffic even if it is encrypted.

Complex toolkit for the Egg, Inc. API, that allows for large-scale testing.

This is a Python based command line ARP Spoofer utility, which takes input as arguments for the exact target IP and gateway IP for which you wish to Spoof ARP request.

This is a Python based command line MAC Address Spoofer utility for LINUX systems, which takes input as an argument for the exact interface you wish to modify the MAC Address for and changes the MAC Address.

IFRITH: Network Threat Hunter & Site Attribution Engine. Passive LAN visibility + MITM primitives. Device discovery, DNS/SNI/mDNS attribution, JA3/JA4 fingerprinting, DNSBL matching and For Deep PCAP information gathering.

This is a command line packet scanner utility for Windows based on Python. When in a network, you can use this to sniff http packets for leaked usernames and passwords, thereby performing MITM.

MITM Buddy is a beginner-friendly tool that lets you explore ARP spoofing, man-in-the-middle attacks, and network analysis — all from a simple, guided terminal interface.

TCP/UDP inspection proxy with on-the-fly TLS MITM via SNI cert forging,