app.py

from flask import Flask, request, send_file
import os
import uuid
import datetime
from PIL import Image
from io import BytesIO
import requests
import colorama
from colorama import Fore, Style

colorama.init(autoreset=True)

pixel_filename = f"{uuid.uuid4()}.png"

app = Flask(__name__)

def create_pixel():
    image = Image.new('RGB', (1, 1), color = (255, 255, 255))
    byte_io = BytesIO()
    image.save(byte_io, 'PNG')
    byte_io.seek(0)
    return byte_io

def get_public_ip():
    try:
        response = requests.get('http://ipv4.icanhazip.com', timeout=5)
        response.raise_for_status()
        return response.text.strip()
    except requests.RequestException as e:
        print(f"Error obtaining public IP: {e}")
        return None


@app.route(f'/{pixel_filename}')
def pixel():
    requester_ip = request.remote_addr
    referer_header = request.headers.get('Referer')
    if 'login.microsoftonline.com' not in referer_header:
        print(f"{Fore.YELLOW}[!] Non-Microsoft referer header detected: {referer_header}{Style.RESET_ALL}")
        print(f"[*] Debug Information:")
        print(f"[*] Requester IP (user logging in): {requester_ip}")
        print(f"[*] Referer header (AitM): {referer_header}")

        # At this point, you can set up a web hook to signal that soneone is under active AitM attack!
    
    return send_file(create_pixel(), mimetype='image/png')

def main():
    if not (os.path.exists('cert.pem') and os.path.exists('key.pem')):
        print("[-] SSL certificates not found. Please generate them using OpenSSL.\n  \\\\--> openssl req -x509 -newkey rsa:4096 -nodes -out cert.pem -keyout key.pem -days 365")
    else:
        public_ip = get_public_ip()
        if public_ip:
            print()
            print(f"{Fore.CYAN}[*] Your public IP address is:{Style.RESET_ALL} {Fore.GREEN}{public_ip}{Style.RESET_ALL}")
            print(f"{Fore.CYAN}[*] Embed this pixel in your CSS file with the following code:{Style.RESET_ALL}\n")
            print(f"{Fore.MAGENTA}[some CSS element] {{")
            print(f"{Fore.MAGENTA}    background-image: url('https://{public_ip}/{pixel_filename}');")
            print(f"{Fore.MAGENTA}    background-size: 0 0;")
            print(Fore.MAGENTA + "}" + Style.RESET_ALL)
            print()

            app.run(ssl_context=('cert.pem', 'key.pem'), host='0.0.0.0', port=443, debug=False, use_reloader=False)

if __name__ == "__main__":
    main()