Injectify is a web based MiTM tool, similiar to BeEF (although completely unrelated in terms of source code). It uses modern web technologies such as ReactJS, Redux, Typescript and Webpack.
What can it do?
- PageGhost - see what's on the victim's screen and interact with it in realtime
- Highly integrated Module platform, with a high-level API
- Data extraction API - record custom data
- Extracts and logs saved passwords from the browser.
Creating a MongoDB database
Tip: For simplicity and compatibility, we recommend using mLab with the Free plan. If you intend to have a lot of traffic you can also setup a dedicated database
Creating an mLab database
- Head over to mLab and create an account. Make sure to verify your email, if you don't then it won't allow you to create a database:
Click on Create new in the upper right corner
Select Sandbox and then click Continue
Select your preferred region and click Continue
injectify as the database name, click Continue and then Submit order
Click on your new database and select Users and then Add database user
Choose a username and password and click Create (make sure
read-only is left unchecked)
Creating a GitHub application
Note: Injectify uses a GitHub SSO based system for authentication, instead of locally managing credentials. This makes it securer and adds the ability to utilise GitHub gists, repos etc.
Head over to GitHub.com and create an account if you haven't already.
Create a new GitHub application and specify the following values:
|Authorization callback URL||
What it should look like:
Tip: In order to actually use Injectify, you first have to setup the configuration file. In the future, you'll be able to do this from the web interface.
Navigate into the repo and copy
server.config.js in a text-editor
Replace the GitHub
client_secret values with your newly created applications ones.
mongodb value with your newly created mLab URL (or dedicated MongoDB URI), in the format:
Setting up the server
Note: This is where you actually install Injectify, you are required to have NodeJS pre-installed.
- Followed the previous steps
- Yarn package manager
- (Optional) A swap file - the reason being that Webpack uses loads of memory
npm i -g yarn yarn global add typescript yarn global add pm2 yarn run install:all yarn run deploy
sudo npm i -g yarn sudo yarn global add typescript sudo yarn global add pm2 yarn run install:all yarn run deploy
Injectify will now be running over at http://localhost:3000
See more at the official documentation site
- Hakin9 is a monthly magazine dedicated to hacking and cybersecurity. In every edition, we try to focus on different approaches to show various techniques - defensive and offensive. This knowledge will help you understand how most popular attacks are performed and how to protect your data from them. Our tutorials, case studies and online courses will prepare you for the upcoming, potential threats in the cyber security world. We collaborate with many individuals and universities and public institutions, but also with companies such as Xento Systems, CATO Networks, EY, CIPHER Intelligence LAB, redBorder, TSG, and others.
- Blog2022.12.13What are the Common Security Weaknesses of Cloud Based Networks?
- Blog2022.10.12Vulnerability management with Wazuh open source XDR
- Blog2022.08.29Deception Technologies: Improving Incident Detection and Response by Alex Vakulov
- Blog2022.08.25Exploring the Heightened Importance of Cybersecurity in Mobile App Development by Jeff Kalwerisky
Wow that’s great, but I have a site I needed traffic to grow my business how can I achieved that, is there any method you can assist me with?