diff --git a/arerules/lan_flash_scan.json b/arerules/lan_flash_scan.json index cac6f0a31..4026eddbf 100644 --- a/arerules/lan_flash_scan.json +++ b/arerules/lan_flash_scan.json @@ -16,7 +16,8 @@ "options": { "ipRange":"<>", "ports":"80,8080", - "threads":"3", + "threads":"2", + "wait":"2", "timeout":"10" } } diff --git a/modules/network/cross_origin_scanner_flash/command.js b/modules/network/cross_origin_scanner_flash/command.js index 10580414f..44a38e2f1 100644 --- a/modules/network/cross_origin_scanner_flash/command.js +++ b/modules/network/cross_origin_scanner_flash/command.js @@ -9,9 +9,9 @@ beef.execute(function() { var ips = new Array(); var ipRange = "<%= @ipRange %>"; var ports = "<%= @ports %>"; - var threads = "<%= @threads %>"; - var timeout = <%= @timeout %>*1000; - var wait = 2; + var threads = parseInt("<%= @threads %>", 10); + var timeout = parseInt("<%= @timeout %>", 10)*1000; + var wait = parseInt("<%= @wait %>", 10)*1000; if(!beef.browser.hasFlash()) { beef.net.send('<%= @command_url %>', <%= @command_id %>, 'fail=Browser does not support Flash', beef.are.status_error()); @@ -151,7 +151,7 @@ beef.execute(function() { // create worker queue var workers = new Array(); for (w=0; w < threads; w++) { - workers.push(new WorkerQueue(wait*1000)); + workers.push(new WorkerQueue(wait)); } // send Flash request to each IP diff --git a/modules/network/cross_origin_scanner_flash/module.rb b/modules/network/cross_origin_scanner_flash/module.rb index 00f9b6c23..eb4c933bc 100644 --- a/modules/network/cross_origin_scanner_flash/module.rb +++ b/modules/network/cross_origin_scanner_flash/module.rb @@ -38,7 +38,8 @@ class Cross_origin_scanner_flash < BeEF::Core::Command return [ {'name' => 'ipRange', 'ui_label' => 'Scan IP range (C class)', 'value' => '192.168.0.1-192.168.0.254'}, {'name' => 'ports', 'ui_label' => 'Ports', 'value' => '80,8080'}, - {'name' => 'threads', 'ui_label' => 'Workers', 'value' => '3'}, + {'name' => 'threads', 'ui_label' => 'Workers', 'value' => '2'}, + {'name' => 'wait', 'ui_label' => 'Wait (s) between each request for each worker', 'value' => '2'}, {'name' => 'timeout', 'ui_label' => 'Timeout for each request (s)', 'value' => '10'} ] end