The Backdoor Factory Proxy (BDFProxy) version-0.3.6 released.

The Backdoor Factory Proxy (BDFProxy) version-0.3.6 released.

For security professionals and researchers only.

Changelog v0.3.6 :
– Add support for BDF Import Directory Patching into the a code cave vs a new section.  Update IDA_IN_CAVE to True in the bdfproxy.cfg file for this.  EXPERIMENTAL…



This script rides on two libraries for usage: The Backdoor Factory (BDF) and the mitmProxy.
Patch binaries during download ala MITM.
Because a lot of security tool websites still serve binaries via non-SSL/TLS means.
Here’s a short list:

+ Supported Environment:

Tested on all Kali Linux builds, whether a physical beefy laptop, a Raspberry Pi, or a VM, each can run BDFProxy.

BDF is in bdf/
Run the following to pull down the most recent:


git clone bdf/
If you get a certificate error, run the following:

And exit [Ctr+C] after mitmProxy loads.


Update everything before each use:


You will need to configure your C2 host and port settings before running BDFProxy. DO NOT overlap C2 PORT settings between different payloads. You’ll be sending linux shells to windows machines and things will be segfaulting all over the place. After running, there will be a metasploit resource script created to help with setting up your C2 communications. Check it carefully. By the way, everything outside the [Overall] section updates on the fly, so you don’t have to kill your proxy to change settings to work with your environment.

But wait! You will need to configure your mitm machine for mitm-ing! If you are using a wifiPineapple I modded a script put out by hack5 to help you with configuration. Run ./ and enter in the correct configs for your environment. This script configures iptables to push only http (non-ssl) traffic through the proxy. All other traffic is fowarded normally.


Here’s some sweet ascii art for possible phyiscal settings of the proxy:
Lan usage:

WIFI Usage :

 Testing : 

+ Logging:

We have it. The proxy window will quickly fill with massive amounts of cat links depending on the client you are testing. Use tail -f proxy.log to see what is getting patched and blocked by your blacklist settings. However, keep an eye on the main proxy window if you have chosen to patch binaries manually, things move fast and behind the scences there is multi-threading of traffic, but the intial requests and responses are locking for your viewing pleasure.

+ Attack Scenarios (all with permission of targets):
-Evil Wifi AP
-Arp Redirection
-Physical plant in a wiring closet
-Logical plant at your favorite ISP

Download version :
BDFProxy-0.3.6.tar.gz(15.91 KB) KB)  | Our Post Before | Source :

Contact the developer on:
IRC: #BDFactory
Twitter: @midnite_runr