Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Validate module class/dir name

Browse Source
This commit is contained in:
bcoles
2014-01-13 00:26:03 +10:30
parent 048405d4f1
commit 8ea8098fe2
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
tools/csrf_to_beef
View File

@@ -3,6 +3,7 @@
# CSRF to BeEF module tool #
# TODO: #
# * support xhr #
# * support multipart file upload #
# * support CORS requests #
# * add proper character encoding #
################################################################################
@@ -17,7 +18,7 @@ require 'fileutils'
def usage
puts "CSRF to BeEF module tool"
puts "[*] Generate a BeEF module using a CSRF PoC from Burp Suite."
puts "[*] Usage: ./csrf_to_beef --file poc.html --name [MODULE NAME]"
puts "[*] Usage: ./csrf_to_beef --file sample.html --name [MODULE NAME]"
exit 1
end
usage if ARGV.size < 3
@@ -145,10 +146,7 @@ end
def main fname, mname
# validate class name
# TODO fix this
class_name = mname.gsub(/[^\w\s_-]+/, '')
.gsub(/(^|\b\s)\s+($|\s?\b)/, '\\1\\2')
.gsub(/\s+/, '_').downcase
class_name = mname.gsub(/[^\w]/, '_').downcase
# read PoC file
puts "[*] Reading PoC from '#{fname}'"