Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix origin / domain terminology (#1688)

Browse Source
This commit is contained in:
zinduolis
2024-10-23 16:07:17 +10:00
parent 89ed6cce8e
commit a5a8196792
173 changed files with 571 additions and 643 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/misc/wordpress/upload_rce_plugin/config.yaml
View File

@@ -14,7 +14,7 @@ beef:
Afterwards, the URI to trigger is: http://vulnerable-wordpress.site/wp-content/plugins/beefbind/beefbind.php,
and the command to execute can be send by a POST-parameter named 'cmd', with a 'BEEF' header containing the value of the auth_key option.
However, there are more stealthy ways to send the POST request to execute the command, depending on the target.
CORS headers have been added to allow bidirectional crossdomain communication.
CORS headers have been added to allow bidirectional crossorigin communication.
authors: ['Bart Leppens', 'Erwan LR']
target:
working: ['ALL']

2
modules/misc/wordpress_post_auth_rce/config.yaml
View File

@@ -9,7 +9,7 @@ beef:
enable: true
category: "Misc"
name: "Wordpress Post-Auth RCE"
description: "This module attempts to upload and activate a malicious wordpress plugin. Afterwards, the URI to trigger it is: http://vulnerable-wordpress.site/wordpress/wp-content/plugins/beefbind/beefbind.php. The command to execute can be send by a POST-parameter named 'cmd'. CORS headers have been added to allow bidirectional crossdomain communication."
description: "This module attempts to upload and activate a malicious wordpress plugin. Afterwards, the URI to trigger it is: http://vulnerable-wordpress.site/wordpress/wp-content/plugins/beefbind/beefbind.php. The command to execute can be send by a POST-parameter named 'cmd'. CORS headers have been added to allow bidirectional crossorigin communication."
authors: ["Bart Leppens"]
target:
working: ["ALL"]