Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Renamed "Requester" tab to "Rider"

Browse Source 
Added Proxy sub-tab under Rider tab

Part of issue 63
This commit is contained in:
bcoles
2011-12-20 22:04:22 +10:30
parent 3ee52b82c0
commit 590e514680
4 changed files with 35 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
extensions/admin_ui/controllers/panel/index.html
View File

@@ -25,7 +25,7 @@
<%= script_tag 'ui/panel/tabs/ZombieTabDetails.js' %>
<%= script_tag 'ui/panel/tabs/ZombieTabLogs.js' %>
<%= script_tag 'ui/panel/tabs/ZombieTabCommands.js' %>
<%= script_tag 'ui/panel/tabs/ZombieTabRequester.js' %>
<%= script_tag 'ui/panel/tabs/ZombieTabRider.js' %>
<%= script_tag 'ui/panel/tabs/ZombieTabXssRays.js' %>
<%= script_tag 'ui/panel/PanelViewer.js' %>

6
extensions/admin_ui/media/javascript/ui/panel/WelcomeTab.js
View File

@@ -38,12 +38,12 @@ WelcomeTab = function() {
<li><img alt='' src='media/images/icons/grey.png' unselectable='on'> The command module is yet to be verified against this target</li>\
<li><img alt='' src='media/images/icons/red.png' unselectable='on'> The command module does not work against this target</li></ul><br />\
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>XssRays:</span> The XssRays tab allows the user to check if links, forms and URI path of the page (where the browser is hooked) is vulnerable to XSS.</li> \
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Requester:</span> The Requester tab allows you to submit arbitrary HTTP requests on behalf of the hooked browser. \
Each request sent by the Requester is recorded in the History panel. Click a history item to view the HTTP headers and HTML source of the HTTP response.</li></ul><br />\
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Rider:</span> The Rider tab allows you to submit arbitrary HTTP requests on behalf of the hooked browser. \
Each request sent by the Rider is recorded in the History panel. Click a history item to view the HTTP headers and HTML source of the HTTP response.</li></ul><br />\
<p>You can also right-click a hooked browser to open a context-menu with additional functionality:</p><br /> \
<ul style=\"margin-left:15px;\">\
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Tunneling Proxy:</span> The Proxy allows you to use a hooked browser as a proxy. Simply right-click a browser from the Hooked Browsers tree to the left and select \"Use as Proxy\". \
Each request sent through the Proxy is recorded in the History panel in the Requester tab. Click a history item to view the HTTP headers and HTML source of the HTTP response.</li>\
Each request sent through the Proxy is recorded in the History panel in the Rider tab. Click a history item to view the HTTP headers and HTML source of the HTTP response.</li>\
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>XssRays:</span> XssRays allows the user to check if links, forms and URI path of the page (where the browser is hooked) is vulnerable to XSS. To customize default settings of an XssRays scan, please use the XssRays tab.</li></ul><br /> \
<p><span style='font:bold 13px tahoma,arial,helvetica,sans-serif'>Learn More</span></p><br />\
<p>To learn more about how BeEF works please review the wiki:</p><br />\

32
extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRequester.js → extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRider.js
View File

@@ -32,6 +32,34 @@ ZombieTab_Requester = function(zombie) {
layout: 'fit'
});
/*
* The panel used to select hooked browsers as proxy endpoints.
* TODO: Add list of hooked browsers here
********************************************/
var proxy_panel = new Ext.Panel({
id: 'requester-proxy-zombie-'+zombie.session,
title: 'Proxy',
layout: 'fit',
padding: '10 10 10 10',
html: "<p style='font:11px tahoma,arial,helvetica,sans-serif'>The Tunneling Proxy allows you to use a hooked browser as a proxy. Simply right-click a browser from the Hooked Browsers tree to the left and select \"Use as Proxy\". Each request sent through the Proxy is recorded in the History panel in the Rider tab. Click a history item to view the HTTP headers and HTML source of the HTTP response.</p>",
listeners: {
activate: function(proxy_panel) {
// to do: refresh list of hooked browsers
}
}
});
/*
* TODO: The panel used to configure the proxy on-the-fly
********************************************/
/*
var options_panel = new Ext.Panel({
id: 'requester-options-zombie-'+zombie.session,
title: 'Proxy',
layout: 'fit'
});
*/
/*
* The panel that displays the history of all requests performed.
********************************************/
@@ -297,14 +325,14 @@ ZombieTab_Requester = function(zombie) {
ZombieTab_Requester.superclass.constructor.call(this, {
id: 'zombie-requester-tab-zombie-'+zombie.session,
title: 'Requester',
title: 'Rider',
activeTab: 0,
viewConfig: {
forceFit: true,
type: 'fit'
},
items: [history_panel, requests_panel],
items: [history_panel, requests_panel, proxy_panel],
bbar: commands_statusbar,

2
extensions/proxy/proxy.rb
View File

@@ -93,7 +93,7 @@ module BeEF
headers = @response['response_headers']
# The following is needed to forward back some of the original HTTP response headers obtained via XHR calls.
# Original XHR response headers are stored in extension_proxy_http table (response_headers column),
# Original XHR response headers are stored in extension_requester_http table (response_headers column),
# but we are forwarding back only some of them (Server, X-.. - like X-Powered-By -, Content-Type, ... ).
# Some of the original response headers need to be removed, like encoding and cache related: for example
# about encoding, the original response headers says that the content-length is 1000 as the response is gzipped,