diff --git a/modules/misc/bozocrack/command.js b/modules/misc/bozocrack/command.js deleted file mode 100644 index 2158146c1..000000000 --- a/modules/misc/bozocrack/command.js +++ /dev/null @@ -1,239 +0,0 @@ -// -// Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net -// Browser Exploitation Framework (BeEF) - http://beefproject.com -// See the file 'doc/COPYING' for copying permission -// - -beef.execute(function() { - - var hash = beef.encode.base64.decode('<%= Base64.encode64(@hash).delete("\n") %>'); - var result = ''; - - // validate hash - var re = /^[0-9a-f]{32}$/i; - var valid_hash = re.exec(hash); - if (!valid_hash) { - beef.net.send('<%= @command_url %>', <%= @command_id %>, 'fail=invalid MD5 hash', beef.are.status_error()); - return; - } - - var searchGoogle = function(query) { - - var script = document.createElement('script'); - script.defer = true; - script.type = "text/javascript"; - script.src = "https://ajax.googleapis.com/ajax/services/search/web?callback=callback&lstkp=0&rsz=large&hl=en&q=" + query + "&v=1.0"; - - callback = function (query) { - document.body.removeChild(script); - delete callback; - if (query) { - var results = JSON.stringify(query).split(/[":;,\s\b]+/); - for (var i = 0; i < results.length; i++) { - if (MD5(results[i]) == hash) { - result = results[i]; - break; - } - } - } - if (!result) { - beef.net.send('<%= @command_url %>', <%= @command_id %>, "hash="+hash+"&fail=no results", beef.are.status_error()); - } else { - beef.net.send('<%= @command_url %>', <%= @command_id %>, "hash="+hash+"&result="+result); - } - }; - - document.body.appendChild(script); - } - - -/** -* -* MD5 (Message-Digest Algorithm) -* http://www.webtoolkit.info/ -* -**/ -var MD5 = function (string) { - function RotateLeft(lValue, iShiftBits) { - return (lValue<>>(32-iShiftBits)); - } - function AddUnsigned(lX,lY) { - var lX4,lY4,lX8,lY8,lResult; - lX8 = (lX & 0x80000000); - lY8 = (lY & 0x80000000); - lX4 = (lX & 0x40000000); - lY4 = (lY & 0x40000000); - lResult = (lX & 0x3FFFFFFF)+(lY & 0x3FFFFFFF); - if (lX4 & lY4) { - return (lResult ^ 0x80000000 ^ lX8 ^ lY8); - } - if (lX4 | lY4) { - if (lResult & 0x40000000) { - return (lResult ^ 0xC0000000 ^ lX8 ^ lY8); - } else { - return (lResult ^ 0x40000000 ^ lX8 ^ lY8); - } - } else { - return (lResult ^ lX8 ^ lY8); - } - } - function F(x,y,z) { return (x & y) | ((~x) & z); } - function G(x,y,z) { return (x & z) | (y & (~z)); } - function H(x,y,z) { return (x ^ y ^ z); } - function I(x,y,z) { return (y ^ (x | (~z))); } - function FF(a,b,c,d,x,s,ac) { - a = AddUnsigned(a, AddUnsigned(AddUnsigned(F(b, c, d), x), ac)); - return AddUnsigned(RotateLeft(a, s), b); - }; - function GG(a,b,c,d,x,s,ac) { - a = AddUnsigned(a, AddUnsigned(AddUnsigned(G(b, c, d), x), ac)); - return AddUnsigned(RotateLeft(a, s), b); - }; - function HH(a,b,c,d,x,s,ac) { - a = AddUnsigned(a, AddUnsigned(AddUnsigned(H(b, c, d), x), ac)); - return AddUnsigned(RotateLeft(a, s), b); - }; - function II(a,b,c,d,x,s,ac) { - a = AddUnsigned(a, AddUnsigned(AddUnsigned(I(b, c, d), x), ac)); - return AddUnsigned(RotateLeft(a, s), b); - }; - function ConvertToWordArray(string) { - var lWordCount; - var lMessageLength = string.length; - var lNumberOfWords_temp1=lMessageLength + 8; - var lNumberOfWords_temp2=(lNumberOfWords_temp1-(lNumberOfWords_temp1 % 64))/64; - var lNumberOfWords = (lNumberOfWords_temp2+1)*16; - var lWordArray=Array(lNumberOfWords-1); - var lBytePosition = 0; - var lByteCount = 0; - while ( lByteCount < lMessageLength ) { - lWordCount = (lByteCount-(lByteCount % 4))/4; - lBytePosition = (lByteCount % 4)*8; - lWordArray[lWordCount] = (lWordArray[lWordCount] | (string.charCodeAt(lByteCount)<>>29; - return lWordArray; - }; - function WordToHex(lValue) { - var WordToHexValue="",WordToHexValue_temp="",lByte,lCount; - for (lCount = 0;lCount<=3;lCount++) { - lByte = (lValue>>>(lCount*8)) & 255; - WordToHexValue_temp = "0" + lByte.toString(16); - WordToHexValue = WordToHexValue + WordToHexValue_temp.substr(WordToHexValue_temp.length-2,2); - } - return WordToHexValue; - }; - function Utf8Encode(string) { - string = string.replace(/\r\n/g,"\n"); - var utftext = ""; - for (var n = 0; n < string.length; n++) { - var c = string.charCodeAt(n); - if (c < 128) { - utftext += String.fromCharCode(c); - } - else if((c > 127) && (c < 2048)) { - utftext += String.fromCharCode((c >> 6) | 192); - utftext += String.fromCharCode((c & 63) | 128); - } - else { - utftext += String.fromCharCode((c >> 12) | 224); - utftext += String.fromCharCode(((c >> 6) & 63) | 128); - utftext += String.fromCharCode((c & 63) | 128); - } - } - return utftext; - }; - var x=Array(); - var k,AA,BB,CC,DD,a,b,c,d; - var S11=7, S12=12, S13=17, S14=22; - var S21=5, S22=9 , S23=14, S24=20; - var S31=4, S32=11, S33=16, S34=23; - var S41=6, S42=10, S43=15, S44=21; - string = Utf8Encode(string); - x = ConvertToWordArray(string); - a = 0x67452301; b = 0xEFCDAB89; c = 0x98BADCFE; d = 0x10325476; - for (k=0;kBozoCrack tool by juuso." - authors: ["juuso", "bcoles"] - target: - working: ["ALL"] diff --git a/modules/misc/bozocrack/module.rb b/modules/misc/bozocrack/module.rb deleted file mode 100644 index 52145dc5d..000000000 --- a/modules/misc/bozocrack/module.rb +++ /dev/null @@ -1,22 +0,0 @@ -# -# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net -# Browser Exploitation Framework (BeEF) - http://beefproject.com -# See the file 'doc/COPYING' for copying permission -# -class Bozo_crack < BeEF::Core::Command - - def self.options - return [ - {'name' => 'hash', 'ui_label' => 'MD5 Hash', 'value' => '5f4dcc3b5aa765d61d8327deb882cf99' } - ] - end - - def post_execute - content = {} - content['result'] = @datastore['result'] if not @datastore['result'].nil? - content['fail'] = @datastore['fail'] if not @datastore['fail'].nil? - save content - end - -end -