Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Core: Resolve many Rubocop violations (#2282)

Browse Source
This commit is contained in:
bcoles
2022-01-24 16:25:39 +11:00
committed by GitHub
parent 9f7e1ecfc1
commit 124c9d60b3
105 changed files with 3480 additions and 3715 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
core/main/rest/handlers/admin.rb
View File

@@ -8,20 +8,19 @@ module BeEF
module Core
module Rest
class Admin < BeEF::Core::Router::Router
config = BeEF::Core::Configuration.instance
time_since_last_failed_auth = 0
before do
# @todo: this code comment is a lie. why is it here?
# error 401 unless params[:token] == config.get('beef.api_token')
halt 401 if not BeEF::Core::Rest.permitted_source?(request.ip)
halt 401 unless BeEF::Core::Rest.permitted_source?(request.ip)
# halt if requests are inside beef.restrictions.api_attempt_delay
if time_since_last_failed_auth != 0
halt 401 if not BeEF::Core::Rest.timeout?('beef.restrictions.api_attempt_delay',
time_since_last_failed_auth,
lambda { |time| time_since_last_failed_auth = time})
# halt if requests are inside beef.restrictions.api_attempt_delay
if time_since_last_failed_auth != 0 && !BeEF::Core::Rest.timeout?('beef.restrictions.api_attempt_delay',
time_since_last_failed_auth,
->(time) { time_since_last_failed_auth = time })
halt 401
end
headers 'Content-Type' => 'application/json; charset=UTF-8',
@@ -36,44 +35,37 @@ module BeEF
# Input must be specified in JSON format
#
# +++ Example: +++
#POST /api/admin/login HTTP/1.1
#Host: 127.0.0.1:3000
#Content-Type: application/json; charset=UTF-8
#Content-Length: 18
# POST /api/admin/login HTTP/1.1
# Host: 127.0.0.1:3000
# Content-Type: application/json; charset=UTF-8
# Content-Length: 18
#
#{"username":"beef", "password":"beef"}
# {"username":"beef", "password":"beef"}
#===response (snip)===
#HTTP/1.1 200 OK
#Content-Type: application/json; charset=UTF-8
#Content-Length: 35
# HTTP/1.1 200 OK
# Content-Type: application/json; charset=UTF-8
# Content-Length: 35
#
#{"success":"true","token":"122323121"}
# {"success":"true","token":"122323121"}
#
post '/login' do
request.body.rewind
begin
data = JSON.parse request.body.read
# check username and password
if not (data['username'].eql? config.get('beef.credentials.user') and data['password'].eql? config.get('beef.credentials.passwd') )
if not data['password'].eql? "broken_pass"
BeEF::Core::Logger.instance.register('Authentication', "User with ip #{request.ip} has failed to authenticate in the application.")
end
# failed attempts
time_since_last_failed_auth = Time.now()
halt 401
else
{ "success" => true,
"token" => "#{config.get('beef.api_token')}"
if data['username'].eql?(config.get('beef.credentials.user')) && data['password'].eql?(config.get('beef.credentials.passwd'))
return {
'success' => true,
'token' => config.get('beef.api_token').to_s
}.to_json
end
rescue => e
BeEF::Core::Logger.instance.register('Authentication', "User with ip #{request.ip} has failed to authenticate in the application.")
time_since_last_failed_auth = Time.now
halt 401
rescue StandardError
error 400
end
end
private
end
end
end