diff --git a/extensions/admin_ui/controllers/panel/index.html b/extensions/admin_ui/controllers/panel/index.html index a23519222..896f77b92 100644 --- a/extensions/admin_ui/controllers/panel/index.html +++ b/extensions/admin_ui/controllers/panel/index.html @@ -25,7 +25,7 @@ <%= script_tag 'ui/panel/tabs/ZombieTabDetails.js' %> <%= script_tag 'ui/panel/tabs/ZombieTabLogs.js' %> <%= script_tag 'ui/panel/tabs/ZombieTabCommands.js' %> - <%= script_tag 'ui/panel/tabs/ZombieTabRequester.js' %> + <%= script_tag 'ui/panel/tabs/ZombieTabRider.js' %> <%= script_tag 'ui/panel/tabs/ZombieTabXssRays.js' %> <%= script_tag 'ui/panel/PanelViewer.js' %> diff --git a/extensions/admin_ui/media/javascript/ui/panel/WelcomeTab.js b/extensions/admin_ui/media/javascript/ui/panel/WelcomeTab.js index 4c4aa11f0..564cea2b1 100644 --- a/extensions/admin_ui/media/javascript/ui/panel/WelcomeTab.js +++ b/extensions/admin_ui/media/javascript/ui/panel/WelcomeTab.js @@ -38,12 +38,12 @@ WelcomeTab = function() {
  • The command module is yet to be verified against this target
    • \
  • The command module does not work against this target

    • \
  • XssRays: The XssRays tab allows the user to check if links, forms and URI path of the page (where the browser is hooked) is vulnerable to XSS.
    • \ -
  • Requester: The Requester tab allows you to submit arbitrary HTTP requests on behalf of the hooked browser. \ - Each request sent by the Requester is recorded in the History panel. Click a history item to view the HTTP headers and HTML source of the HTTP response.

    • \ +
  • Rider: The Rider tab allows you to submit arbitrary HTTP requests on behalf of the hooked browser. \ + Each request sent by the Rider is recorded in the History panel. Click a history item to view the HTTP headers and HTML source of the HTTP response.

    • \

    You can also right-click a hooked browser to open a context-menu with additional functionality:


    \
    \

    Learn More


    \

    To learn more about how BeEF works please review the wiki:


    \ diff --git a/extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRequester.js b/extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRider.js similarity index 90% rename from extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRequester.js rename to extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRider.js index 95657e245..60fea3273 100644 --- a/extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRequester.js +++ b/extensions/admin_ui/media/javascript/ui/panel/tabs/ZombieTabRider.js @@ -32,6 +32,34 @@ ZombieTab_Requester = function(zombie) { layout: 'fit' }); + /* + * The panel used to select hooked browsers as proxy endpoints. + * TODO: Add list of hooked browsers here + ********************************************/ + var proxy_panel = new Ext.Panel({ + id: 'requester-proxy-zombie-'+zombie.session, + title: 'Proxy', + layout: 'fit', + padding: '10 10 10 10', + html: "

    The Tunneling Proxy allows you to use a hooked browser as a proxy. Simply right-click a browser from the Hooked Browsers tree to the left and select \"Use as Proxy\". Each request sent through the Proxy is recorded in the History panel in the Rider tab. Click a history item to view the HTTP headers and HTML source of the HTTP response.

    ", + listeners: { + activate: function(proxy_panel) { + // to do: refresh list of hooked browsers + } + } + + }); + + /* + * TODO: The panel used to configure the proxy on-the-fly + ********************************************/ + /* + var options_panel = new Ext.Panel({ + id: 'requester-options-zombie-'+zombie.session, + title: 'Proxy', + layout: 'fit' + }); + */ /* * The panel that displays the history of all requests performed. ********************************************/ @@ -297,14 +325,14 @@ ZombieTab_Requester = function(zombie) { ZombieTab_Requester.superclass.constructor.call(this, { id: 'zombie-requester-tab-zombie-'+zombie.session, - title: 'Requester', + title: 'Rider', activeTab: 0, viewConfig: { forceFit: true, type: 'fit' }, - items: [history_panel, requests_panel], + items: [history_panel, requests_panel, proxy_panel], bbar: commands_statusbar, diff --git a/extensions/proxy/proxy.rb b/extensions/proxy/proxy.rb index 669ed26e3..e0beb9bcd 100644 --- a/extensions/proxy/proxy.rb +++ b/extensions/proxy/proxy.rb @@ -93,7 +93,7 @@ module BeEF headers = @response['response_headers'] # The following is needed to forward back some of the original HTTP response headers obtained via XHR calls. - # Original XHR response headers are stored in extension_proxy_http table (response_headers column), + # Original XHR response headers are stored in extension_requester_http table (response_headers column), # but we are forwarding back only some of them (Server, X-.. - like X-Powered-By -, Content-Type, ... ). # Some of the original response headers need to be removed, like encoding and cache related: for example # about encoding, the original response headers says that the content-length is 1000 as the response is gzipped,