- Have fun while your browser is working against you. -
- -
- These links are for demonstrating the "collect links" command module
-
- You can also load up a more advanced demo page here -
- - - diff --git a/demos/butcher/butch.css b/demos/butcher/butch.css deleted file mode 100644 index b113f2e5e..000000000 --- a/demos/butcher/butch.css +++ /dev/null @@ -1,59 +0,0 @@ -html { - height: 100%; -} -body { - background: #fff; - padding: 0; - margin: 0; - height: 100%; -} -#content { - position: relative; - width: 800px; - height: 100%; - margin-left: auto; - margin-right: auto; - /*border: solid 1px black;*/ - background-image: url("right.jpg"); - background-repeat: no-repeat; - background-position: right top; -} - -#logo { - position: absolute; - top: 0; - left: 0; - width: 368px; -} -#stuff { - position: relative; - /*border: solid 1px red;*/ - top: 200px; - width: 420px; -} -.bigger { - font-family: "Lucida Sans", arial; - font-size: 18px; -} -.normal { - padding-top: 20px; - font-family: "Lucida Sans", arial; - font-size: 14px; -} -.smaller { - padding-top: 20px; - font-family: "Lucida Sans", arial; - font-size: 8px; -} -#friends { - display: none; - padding-top: 20px; -} -#hamper { - display: none; - padding-top: 20px; -} -a:link {color:#000;} /* unvisited link */ -a:visited {color:#000} /* visited link */ -a:hover {color:#000;} /* mouse over link */ -a:active {color:#000;} /* selected link */ \ No newline at end of file diff --git a/demos/butcher/index.html b/demos/butcher/index.html deleted file mode 100644 index 9e3903091..000000000 --- a/demos/butcher/index.html +++ /dev/null @@ -1,62 +0,0 @@ - - - - - -
- | t |
- This page is not hooked by beef. However you should still be capable of accessing it - using the Requester. -
- - \ No newline at end of file diff --git a/demos/butcher/top.jpg b/demos/butcher/top.jpg deleted file mode 100644 index 7a1ed78a3..000000000 Binary files a/demos/butcher/top.jpg and /dev/null differ diff --git a/demos/passwd_manager_theft.html b/demos/passwd_manager_theft.html deleted file mode 100644 index 4a2d70c50..000000000 --- a/demos/passwd_manager_theft.html +++ /dev/null @@ -1,27 +0,0 @@ - - -
- Instructions:
-
- 1. Write a fake username and password in the form below
- 2. After having submitted the form, make sure you tell firefox that you want to save
- 3. Exploit your hooked browser with the password manager theft command module.
-
-
- - - - - \ No newline at end of file diff --git a/demos/secret_page.html b/demos/secret_page.html deleted file mode 100644 index cf295841d..000000000 --- a/demos/secret_page.html +++ /dev/null @@ -1,13 +0,0 @@ - - -- This page is not hooked by beef. However you should still be capable of accessing it - using the Requester. -
- - \ No newline at end of file diff --git a/install.rb b/install.rb deleted file mode 100644 index 2c23a9859..000000000 --- a/install.rb +++ /dev/null @@ -1,112 +0,0 @@ -require 'rubygems' - -puts "\nWelcome to the BEeF installer!" - -puts "\nPlease make sure you have installed SQLite before proceeding. For instructions on how to do this please see the INSTALL file" - -# array of required gems - add to as needed (specify a version if needed eg "gem_name, =x.x.x") -$gems_required = ["ansi", "dm-core", "json", "data_objects", "do_sqlite3", "sqlite3", "dm-sqlite-adapter", - "parseconfig", "erubis", "dm-migrations"] - -# array of missing non-version specific gems installed -$gems_missing = Array.new - -# array of missing version specific gems installed -$gems_missing_version = Array.new - -# check all required gems (dependencies) are present -def dep_check - $gems_required.each do |current_gem| - begin - if current_gem.include? "," - tokens = current_gem.split(",") - gem tokens[0], tokens[1] - else - gem current_gem - end - rescue Gem::LoadError - if current_gem.include? "," - $gems_missing_version << current_gem - else - $gems_missing << current_gem - end - end - end - if $gems_missing.length == 0 && $gems_missing_version.length == 0 - return true - else - return false - end -end - -# display install options -def display_opts - puts "\n1) Install all required gems automatically\n" + "2) List required gems and exit so they can be installed manually\n" + "3) Exit installer\n\n" - option = gets - return option -end - -# generate install command for missing gems -def install_command - if RUBY_PLATFORM =~ /linux/ or RUBY_PLATFORM =~ /darwin/ - cmd = "sudo gem install" - $gems_missing.each do |current_gem| - cmd = cmd + " #{current_gem}" - end - if $gems_missing_version.length != 0 - $gems_missing_version.each do |current_gem| - if cmd == "sudo gem install" - cmd = cmd + " #{current_gem}" - else - cmd = cmd + " && sudo gem install #{current_gem}" - end - end - end - else - cmd = "gem install" - $gems_missing.each do |current_gem| - cmd = cmd + " #{current_gem}" - end - if $gems_missing_version.length != 0 - $gems_missing_version.each do |current_gem| - if cmd == "gem install" - cmd = cmd + " #{current_gem}" - else - cmd = cmd + " & gem install #{current_gem}" - end - end - end - end - cmd = cmd.delete "," "'" - cmd = cmd.gsub("=", "-v") - return cmd -end - -# install missing gems -def install_gems - puts install_command + "\n" - system(install_command) -end - -dep_met = dep_check() - -if dep_met == false - puts "\nSome gems required by BEeF are not present on your system please select an option to continue:" - option = display_opts - while option != "1\n" and option != "2\n" and option != "3\n" - puts "\nInvalid option entered, please select a valid option to continue:" - option = display_opts - end - if option == "1\n" - install_gems - elsif option == "2\n" - cmd = install_command - puts "\nPlease run the following command to update and install all required gems:\n\n" + cmd + "\n\n" - elsif option == "3\n" - puts "\nExiting...\n\n" - end -else - puts "\nAll required gems are present - please run 'ruby beef.rb' to start using BEeF\n\n" - puts "\nThe Default username/password are beef/beef\n\n" - puts "\nAll feedback welcome - http://beef.googlecode.com/\n\n" -end \ No newline at end of file diff --git a/lib/configuration.rb b/lib/configuration.rb deleted file mode 100644 index 18ef92c4d..000000000 --- a/lib/configuration.rb +++ /dev/null @@ -1,20 +0,0 @@ -module BeEF - - # - # - # - class Configuration < ParseConfig - - include Singleton - - def initialize(configuration_file="#{$root_dir}/config.ini") - super(configuration_file) - end - - def get(key) - get_value(key) - end - - end - -end \ No newline at end of file diff --git a/lib/console/banner.rb b/lib/console/banner.rb deleted file mode 100644 index 388f13b58..000000000 --- a/lib/console/banner.rb +++ /dev/null @@ -1,52 +0,0 @@ -module BeEF -module Console - - module Banner - # - # Generates banner - # - def self.generate - - # set the pre-string for output - detail_tab = ' ' * 1 + '--[ ' - - # get the configuration information - @configuration = BeEF::Configuration.instance - version = BeEF::Configuration.instance.get('beef_version') - beef_host = @configuration.get("http_public") || @configuration.get("http_host") - - # create an array of the interfaces the framework is listening on - if beef_host == '0.0.0.0' # the framework will listen on all interfaces - interfaces = Socket.getaddrinfo(Socket.gethostname, 0, Socket::AF_UNSPEC, Socket::SOCK_STREAM, nil, Socket::AI_CANONNAME).map { |x| x[3] } - interfaces = interfaces << "127.0.0.1" - interfaces.uniq! - else # the framework will listen on only one interface - interfaces = [beef_host] - end - - # output the banner to the console - puts - puts " -=[ BeEF v#{version} ]=-\n\n" - puts detail_tab + "Modules: #{BeEF::Models::CommandModule.all.length}" # output the number of modules available - interfaces.map do |host| # display the important URLs on each interface from the interfaces array - puts detail_tab - puts detail_tab + "Hook URL: http://#{host}:#{@configuration.get("http_port")}#{@configuration.get("hook_file")}" - puts detail_tab + "UI URL: http://#{host}:#{@configuration.get("http_port")}#{@configuration.get("http_panel_path")}" - puts detail_tab + "Demo URL: http://#{host}:#{@configuration.get("http_port")}#{@configuration.get("http_demo_path")}" - end - - # if the proxy is enabled output the address - if (@configuration.get('http_proxy_enable').to_i > 0) - puts - puts detail_tab + "HTTP Proxy: http://#{@configuration.get("http_proxy_bind_address")}:#{@configuration.get("http_proxy_bind_port")}" - end - - puts - puts "Ensure you are running the latest framework version. Run 'svn update' to update" - puts - - end - end - -end -end diff --git a/lib/console/commandline.rb b/lib/console/commandline.rb deleted file mode 100644 index a8bccfce9..000000000 --- a/lib/console/commandline.rb +++ /dev/null @@ -1,37 +0,0 @@ -module BeEF -module Console - - module CommandLine - - @options = Hash.new - @options[:verbose] = false - @options[:resetdb] = false - - @already_parsed = false - - # - # Parses the command line arguments of the console. - # It also populates the 'options' hash. - # - def self.parse - return @options if @already_parsed - - optparse = OptionParser.new do |opts| - opts.on('-x', '--reset', 'Reset the database') do - @options[:resetdb] = true - end - - opts.on('-v', '--verbose', 'Display debug information') do - @options[:verbose] = true - end - end - - optparse.parse! - @already_parsed = true - @options - end - - end - -end -end \ No newline at end of file diff --git a/lib/constants.rb b/lib/constants.rb deleted file mode 100644 index 575541e7b..000000000 --- a/lib/constants.rb +++ /dev/null @@ -1,145 +0,0 @@ -module BeEF - -# -# This module list all the constants used by the framework. -# -module Constants - - module CommandModule - - MODULE_TARGET_VERIFIED_NOT_WORKING = 0 - MODULE_TARGET_VERIFIED_WORKING = 1 - MODULE_TARGET_VERIFIED_USER_NOTIFY = 2 - MODULE_TARGET_VERIFIED_UNKNOWN = 3 - - MODULE_TARGET_VERIFIED_NOT_WORKING_IMG = 'red.png' - MODULE_TARGET_VERIFIED_USER_NOTIFY_IMG = 'orange.png' - MODULE_TARGET_VERIFIED_WORKING_IMG = 'green.png' - MODULE_TARGET_VERIFIED_UNKNOWN_IMG = 'grey.png' - - MODULE_TARGET_IMG_PATH = 'public/images/icons/' - - end - - module Browsers - - FF = 'FF' # Firefox - M = 'M' # Mozila - IE = 'IE' # Internet Explorer - S = 'S' # Safari - K = 'K' # Konqueror - C = 'C' # Chrome - O = 'O' # Opera - ALL = 'ALL' # ALL - UNKNOWN = 'UN' # Unknown - - FRIENDLY_FF_NAME = 'Firefox' - FRIENDLY_M_NAME = 'Mozila' - FRIENDLY_IE_NAME = 'Internet Explorer' - FRIENDLY_S_NAME = 'Safari' - FRIENDLY_K_NAME = 'Konqueror' - FRIENDLY_C_NAME = 'Chrome' - FRIENDLY_O_NAME = 'Opera' - FRIENDLY_UN_NAME = "UNKNOWN" - - def self.friendly_name(browser_name) - - case browser_name - when FF; return FRIENDLY_FF_NAME - when M; return FRIENDLY_M_NAME - when IE; return FRIENDLY_IE_NAME - when S; return FRIENDLY_S_NAME - when K; return FRIENDLY_K_NAME - when C; return FRIENDLY_C_NAME - when O; return FRIENDLY_O_NAME - when UNKNOWN; return FRIENDLY_UN_NAME - end - - end - - def self.match_browser(browserstring) - matches = [] - browserstring.split(" ").each do |chunk| - case chunk - when /Firefox/ , /FF/ - matches << FF - when /Mozilla/ - matches << M - when /Internet Explorer/, /IE/ - matches << IE - when /Safari/ - matches << S - when /Konqueror/ - matches << K - when /Chrome/ - matches << C - when /Opera/ - matches << O - end - end - matches.uniq - end - - end - - # The User Agent strings for browser detection - module Agents - - AGENT_UNKNOWN_IMG = 'unknown.png' - AGENT_FIREFOX_UA_STR = 'Firefox' - AGENT_FIREFOX_IMG = 'firefox.png' - AGENT_MOZILLA_UA_STR = 'Mozilla' - AGENT_MOZILLA_IMG = 'mozilla.png' - AGENT_IE_UA_STR = 'MSIE' - AGENT_IE_IMG = 'msie.png' - AGENT_SAFARI_UA_STR = 'Safari' - AGENT_SAFARI_IMG = 'safari.png' - AGENT_KONQ_UA_STR = 'Konqueror' - AGENT_KONQ_IMG = 'konqueror.png' - AGENT_CHROME_UA_STR = 'Chrome' - AGENT_CHROME_IMG = 'chrome.png' - AGENT_OPERA_UA_STR = 'Opera' - AGENT_OPERA_IMG = 'opera.ico' - - end - - # The OS'es strings for os detection. - module Os - - OS_UNKNOWN_IMG = 'unknown.png' - OS_WINDOWS_UA_STR = 'Windows' - OS_WINDOWS_IMG = 'win.png' - OS_LINUX_UA_STR = 'Linux' - OS_LINUX_IMG = 'linux.png' - OS_MAC_UA_STR = 'Mac' - OS_MAC_IMG = 'mac.png' - OS_IPHONE_UA_STR = 'iPhone' - OS_IPHONE_IMG = 'iphone.png' - - def self.match_os(name) - case name.downcase - when /win/ - OS_WINDOWS_UA_STR - when /lin/ - OS_LINUX_UA_STR - when /os x/, /osx/, /mac/ - OS_MAC_UA_STR - when /iphone/ - OS_IPHONE_UA_STR - else - 'ALL' - end - end - - end - - # The distributed engine codes - module DistributedEngine - - REQUESTER = 1 - PORTSCANNER = 2 - - end - -end -end diff --git a/lib/crypto.rb b/lib/crypto.rb deleted file mode 100644 index 91cb2ade9..000000000 --- a/lib/crypto.rb +++ /dev/null @@ -1,26 +0,0 @@ -module BeEF - -# -# This module provides crypto functionality -# -module Crypto - - # - # Generate a secure random token - # - def self.secure_token(len = nil) - - # get default length from config - config = BeEF::Configuration.instance - token_length = len || config.get('crypto_default_value_length').to_i - - raise WEBrick::HTTPStatus::BadRequest, "Token length is zero or less" if (1 > token_length) - - # return random hex string - OpenSSL::Random.random_bytes(token_length).unpack("H*")[0] - - end - -end - -end diff --git a/lib/filter/base.rb b/lib/filter/base.rb deleted file mode 100644 index 633f566af..000000000 --- a/lib/filter/base.rb +++ /dev/null @@ -1,95 +0,0 @@ -module BeEF - - module Filter - - # check if the string is not empty and not nil - def self.is_non_empty_string?(str) - return false if str.nil? - return false if not str.is_a? String - return false if str.empty? - true - end - - # check if only the characters in 'chars' are in 'str' - def self.only?(chars, str) - regex = Regexp.new('[^' + chars + ']') - regex.match(str).nil? - end - - # check if one or more characters in 'chars' are in 'str' - def self.exists?(chars, str) - regex = Regexp.new(chars) - not regex.match(str).nil? - end - - # check for null char - def self.has_null? (str) - return false if not is_non_empty_string?(str) - exists?('\x00', str) - end - - # check for non-printalbe char - def self.has_non_printable_char?(str) - return false if not is_non_empty_string?(str) - not only?('[:print:]', str) - end - - # check if num chars only - def self.nums_only?(str) - return false if not is_non_empty_string?(str) - only?('0-9', str) - end - - # check if valid float - def self.is_valid_float?(str) - return false if not is_non_empty_string?(str) - return false if not only?('0-9\.', str) - not (str =~ /^[\d]+\.[\d]+$/).nil? - end - - # check if hex chars only - def self.hexs_only?(str) - return false if not is_non_empty_string?(str) - only?('0123456789ABCDEFabcdef', str) - end - - # check if first char is a num - def self.first_char_is_num?(str) - return false if not is_non_empty_string?(str) - not (str =~ /^\d.*/).nil? - end - - # check for space chars: \t\n\r\f - def self.has_whitespace_char?(str) - return false if not is_non_empty_string?(str) - exists?('\s', str) - end - - # check for non word chars: a-zA-Z0-9 - def self.alphanums_only?(str) - return false if not is_non_empty_string?(str) - only?("a-zA-Z0-9", str) - end - - # check if valid ip address string - def self.is_valid_ip?(ip) - return true if ip =~ /^(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})?$/ - false - end - - # check for valid browser details chars - def self.has_valid_browser_details_chars?(str) - return false if not is_non_empty_string?(str) - not (str =~ /[^\w\d\s()-.,;:_\/!\302\256]/).nil? # \302\256 is the (r) character - end - - # check for valid base details chars - # this is for basic flitering where possible all specific filters must be implemented - def self.has_valid_base_chars?(str) - return false if not is_non_empty_string?(str) - (str =~ /[^\302\256[:print:]]/).nil? # \302\256 is the (r) character - end - - end - -end diff --git a/lib/filter/command.rb b/lib/filter/command.rb deleted file mode 100644 index 74bea6253..000000000 --- a/lib/filter/command.rb +++ /dev/null @@ -1,59 +0,0 @@ -module BeEF - - module Filter - - # check if the string is a valid path from a HTTP request - def self.is_valid_path_info?(str) - return false if str.nil? - return false if not str.is_a? String - return false if has_non_printable_char?(str) - true - end - - # check if the command id valid - def self.is_valid_command_id?(str) - return false if not is_non_empty_string?(str) - return false if not nums_only?(str) - true - end - - # check if the session id valid - def self.is_valid_hook_session_id?(str) - return false if not is_non_empty_string?(str) - return false if not has_valid_key_chars?(str) - true - end - - # check if valid command module datastore key - def self.is_valid_command_module_datastore_key?(str) - return false if not is_non_empty_string?(str) - return false if not has_valid_key_chars?(str) - true - end - - # check if valid command module datastore value - def self.is_valid_command_module_datastore_param?(str) - return false if has_null?(str) - return false if not has_valid_base_chars?(str) - true - end - - # check for word and some punc chars - def self.has_valid_key_chars?(str) - return false if not is_non_empty_string?(str) - return false if not has_valid_base_chars?(str) - true - end - - # check for word and underscore chars - def self.has_valid_param_chars?(str) - return false if str.nil? - return false if not str.is_a? String - return false if str.empty? - return false if not (str =~ /[^\w_]/).nil? - true - end - - end - -end diff --git a/lib/filter/init.rb b/lib/filter/init.rb deleted file mode 100644 index 909549d9a..000000000 --- a/lib/filter/init.rb +++ /dev/null @@ -1,67 +0,0 @@ -module BeEF - - module Filter - - # verify the page title string is valid - def self.is_valid_pagetitle?(str) - return false if not str.is_a? String - return false if has_non_printable_char?(str) - return false if str.length > 50 - true - end - - # check the browser type value - for example, 'FF' - def self.is_valid_browsername?(str) - return false if not is_non_empty_string?(str) - return false if str.length > 2 - return false if has_non_printable_char?(str) - true - end - - # check the os name value - for example, 'Windows XP' - def self.is_valid_osname?(str) - return false if not is_non_empty_string?(str) - return false if has_non_printable_char?(str) - return false if str.length < 2 - true - end - - # verify the browser version string is valid - def self.is_valid_browserversion?(str) - return false if not is_non_empty_string?(str) - return false if has_non_printable_char?(str) - return true if str.eql? "UNKNOWN" - return false if not nums_only?(str) and not is_valid_float?(str) - return false if str.length > 10 - true - end - - # verify the browser/UA string is valid - def self.is_valid_browserstring?(str) - return false if not is_non_empty_string?(str) - return false if has_non_printable_char?(str) - return false if str.length > 200 - true - end - - # verify the hostname string is valid - def self.is_valid_hostname?(str) - return false if not is_non_empty_string?(str) - return false if has_non_printable_char?(str) - return false if str.length > 255 - return false if (str =~ /^[a-zA-Z0-9][a-zA-Z0-9\-\.]*[a-zA-Z0-9]$/).nil? - return false if not (str =~ /\.\./).nil? - return false if not (str =~ /\-\-/).nil? - true - end - - # verify the browser_plugins string is valid - def self.is_valid_browser_plugins?(str) - return false if not is_non_empty_string?(str) - return false if str.length > 400 - return (str =~ /[^\w\d\s()-.,;_!\302\256]/).nil? # \302\256 is the (r) character - end - - end - -end diff --git a/lib/filter/msf.rb b/lib/filter/msf.rb deleted file mode 100644 index b9cefdcb5..000000000 --- a/lib/filter/msf.rb +++ /dev/null @@ -1,12 +0,0 @@ -module BeEF - - module Filter - - def self.is_valid_msf_payload_name?(name) - return false if only?("a-z_/", name) - true - end - - end - -end \ No newline at end of file diff --git a/lib/filter/requester.rb b/lib/filter/requester.rb deleted file mode 100644 index 094c0fe64..000000000 --- a/lib/filter/requester.rb +++ /dev/null @@ -1,27 +0,0 @@ -module BeEF - - module Filter - - def self.is_valid_verb?(verb) - return true if verb.eql? 'GET' or verb.eql? 'POST' - false - end - - def self.is_valid_url?(uri) - return true if uri.eql? WEBrick::HTTPUtils.normalize_path(uri) - false - end - - def self.is_valid_http_version?(version) - return true if version.eql? "HTTP/1.1" or trailer.eql? "HTTP/1.0" - false - end - - def self.is_valid_host_str?(host_str) - return true if host_str.eql? "Host:" - false - end - - end - -end diff --git a/lib/httpproxybase.rb b/lib/httpproxybase.rb deleted file mode 100644 index d347221f3..000000000 --- a/lib/httpproxybase.rb +++ /dev/null @@ -1,24 +0,0 @@ -require 'webrick/httpproxy' -require 'webrick/httputils' - -module BeEF - class HttpProxyBase < WEBrick::HTTPProxyServer - - # call BeEF::HttpProxyZombie.instance - include Singleton - - attr_reader :config - - def initialize - @configuration = BeEF::Configuration.instance - @config[:Logger] = WEBrick::Log.new($stdout, WEBrick::Log::ERROR) - @config[:ServerType] = Thread - super(@config) - end - - # remove beef hook if it exists - def remove_hook(res) - res.body.gsub!(%r'
-
- These aren't the pages you're looking for- - |
-
| t |
| ',' | ",'','
| ","
| ',Date.getShortMonthName(b)," | ",'',Date.getShortMonthName(b+6)," | ",b===0?'')}a.push(' | |
BeEF - The Browser Exploitation Framework
Welcome to BeEF!
Before being able to fully explore the framework you will have to 'hook' a browser. To begin with you can point a browser towards the basic demo page here, or the advanced version here.
After a browser is hooked into the framework they will appear in the 'Hooked Browsers' panel on the left. Hooked browsers will appear in either an online or offline state, depending on how recently they have polled the framework. To interact with a hooked browser simply click it, a new tab will appear.
Each hooked browser tab has a number of sub-tabs, described below:
\ -For more information visit: http://code.google.com/p/beef/
![](/ui/public/images/icons/"+escape(zombie_array[index]["browser_icon"])+"){kind=icon}
";
- text += "![](/ui/public/images/icons/"+escape(zombie_array[index]["os_icon"])+"){kind=icon}
";
- text += zombie_array[index]["ip"];
-
- var new_zombie = {
- 'id' : index,
- 'ip' : zombie_array[index]["ip"],
- 'session' : zombie_array[index]["session"],
- 'text': text,
- 'check' : false,
- 'domain' : zombie_array[index]["domain"]
- };
-
- return new_zombie;
- }
-
- /*
- * Update the hooked browser trees
- * @param: {Literal Object} an object containing the list of offline and online hooked browsers.
- * @param: {Literal Object} an object containing the list of rules from the distributed engine.
- */
- this.updateZombies = function(zombies, rules){
- var offline_hooked_browsers = zombies["offline"];
- var online_hooked_browsers = zombies["online"];
-
- for(tree_type in this.zombies_tree_lists) {
- hooked_browsers_tree = this.zombies_tree_lists[tree_type];
-
- //we compare and remove the hooked browsers from online and offline branches for each tree.
- hooked_browsers_tree.compareAndRemove(zombies);
-
- //add an offline browser to the tree
- for(var i in offline_hooked_browsers) {
- var offline_hooked_browser = this.zombieFactory(i, offline_hooked_browsers);
- hooked_browsers_tree.addZombie(offline_hooked_browser, false, ((tree_type != 'basic') ? true : false));
- }
-
- //add an online browser to the tree
- for(var i in online_hooked_browsers) {
- var online_hooked_browser = this.zombieFactory(i, online_hooked_browsers);
- hooked_browsers_tree.addZombie(online_hooked_browser, true, ((tree_type != 'basic') ? true : false));
- }
-
- //apply the rules to the tree
- hooked_browsers_tree.applyRules(rules);
-
- //expand the online hooked browser tree lists
- if(hooked_browsers_tree.online_hooked_browsers_treenode.childNodes.length > 0) {
- hooked_browsers_tree.online_hooked_browsers_treenode.expand(true);
- }
-
- //expand the offline hooked browser tree lists
- if(hooked_browsers_tree.offline_hooked_browsers_treenode.childNodes.length > 0) {
- hooked_browsers_tree.offline_hooked_browsers_treenode.expand(true);
- }
- }
- }
-};
\ No newline at end of file
diff --git a/public/javascript/ui/panel/common.js b/public/javascript/ui/panel/common.js
deleted file mode 100644
index bc4afdff5..000000000
--- a/public/javascript/ui/panel/common.js
+++ /dev/null
@@ -1,394 +0,0 @@
-var zombie_execute_button_text = 'Execute'
-var zombie_reexecute_button_text = 'Re-execute'
-var re_execute_command_title = 'Re-execute command'
-
-/**
- * Generates fields for the form used to send command modules.
- *
- * @param: {Object} the form to generate the field in.
- * @param: {String/Object} the field name or it's definition as an object.
- * @param: {String} the value that field should have.
- * @param: {Boolean} set to true if you want the field to be disabled.
- * @param: {Object} the targeted Zombie.
- */
-function generate_form_input_field(form, input, value, disabled, zombie) {
- var input_field = null;
- var input_def = null;
-
- if (!input['ui_label']) input['ui_label'] = input['name'];
- if (!input['type']) input['type'] = 'textfield';
- if (!input['value']) input['value'] = '';
-
- input_def = {
- id: 'form-zombie-'+zombie.session+'-field-'+input['name'],
- name: 'txt_'+input['name'],
- fieldLabel: input['ui_label'],
- anchor:'70%',
- allowBlank: false,
- value: input['value']
- };
-
- // create the input field object based upon the type supplied
- switch(input['type'].toLowerCase()) {
- case 'textfield':
- input_field = new Ext.form.TextField(input_def);
- break;
- case 'textarea':
- input_field = new Ext.form.TextArea(input_def);
- break;
- case 'hidden':
- input_field = new Ext.form.Hidden(input_def);
- break;
- case 'label':
- input_def['fieldLabel'] = ''
- input_def['html'] = input['html'];
- input_field = new Ext.form.Label(input_def);
- break;
- case 'checkbox':
- input_def['name'] = 'chk_' + input['name'];
- input_field = new Ext.form.Checkbox(input_def);
- break;
- case 'checkboxgroup':
- input_def['name'] = 'chkg_' + input['name'];
- input_def['items'] = input['items'];
- input_field = new Ext.form.CheckboxGroup(input_def);
- break;
- case 'combobox':
- input_def['name'] = 'com_' + input['name'];
- input_def['triggerAction'] = 'all';
-
- // add a listener so that when the check box is changed it will update the payload options
- if(input.reloadOnChange) { // input.reloadOnChange is set in msfcommand.rb
- Ext.getCmp("payload-panel").show(); // initially the panel will be empty so it may appear still hidden
- input_def['listeners'] = {
- 'select': function(combo, value) {
- get_dynamic_payload_details(combo.getValue(), zombie); // combo.getValue() is the selected payload
- }
- };
- }
-
- // create store to contain options for the combo box
- input_def['store'] = new Ext.data.ArrayStore( {
- fields: input['store_fields'],
- data: input['store_data']
- });
-
- input_field = new Ext.form.ComboBox(input_def);
-
- break;
- default:
- input_field = new Ext.form.TextField(input_def);
- break;
- }
-
- // add the properties for the input element, for example: widths, default values and the html lables
- for(definition in input) {
- if( (typeof input[definition] == 'string') && (definition != 'type') && (definition != 'name')) {
- input_field[definition] = input[definition];
- }
- }
-
- if(value) input_field.setValue(value);
- if(disabled) input_field.setDisabled(true);
-
- form.add(input_field);
-
-};
-
-function get_dynamic_payload_details(payload, zombie) {
-
- modid = Ext.getCmp( 'form-zombie-'+zombie.session+'-field-mod_id').value
- Ext.Ajax.request({
- loadMask: true,
- url: '/ui/modules/select/commandmodule.json',
- method: 'POST',
- params: 'command_module_id=' + modid + '&' + 'payload_name=' + payload,
- success: function(resp) {
- var module = Ext.decode(resp.responseText);
- module = module.command_modules[1];
-
- Ext.getCmp("payload-panel").removeAll(); // clear the panel contents
- Ext.each(module.Data, function(input){
- // generate each of the payload input options
- generate_form_input_field(Ext.getCmp("payload-panel"), input, null, false, zombie);
- });
-
- Ext.getCmp("payload-panel").doLayout();
- }
- })
-}
-
-/**
- * Generate a panel for an command module that already has been executed.
- *
- * @param: {Object} the Panel in the UI to generate the form into.
- * @param: {Integer} the command id to generate the panel for.
- * @param: {Object} the targeted Zombie.
- * @param: {Object} the status bar.
- */
-function genExisingExploitPanel(panel, command_id, zombie, sb) {
- if(typeof panel != 'object') {
- Ext.beef.msg('Bad!', 'Incorrect panel chosen.');
- return;
- }
-
- sb.showBusy(); // status bar update
- panel.removeAll();
-
- Ext.Ajax.request({
- url: '/ui/modules/select/command.json',
- method: 'POST',
- params: 'command_id=' + command_id,
- loadMask: true,
- success: function(resp) {
- var xhr = Ext.decode(resp.responseText);
-
- if(!xhr || !xhr.definition) {
- Ext.beef.msg('Error!', 'We could not retrieve the definition of that command module...');
- return;
- }
-
- var form = new Ext.form.FormPanel({
- url: '/ui/modules/commandmodule/reexecute',
- id: 'form-command-module-zombie-'+zombie.session,
- border: false,
- labelWidth: 75,
- defaultType: 'textfield',
- title: re_execute_command_title,
- bodyStyle: 'padding: 5px;',
-
- items: [new Ext.form.Hidden({name: 'command_id', value: command_id})],
-
- buttons:[{
- text: zombie_reexecute_button_text,
- handler: function() {
- var form = Ext.getCmp('form-command-module-zombie-'+zombie.session);
- if(!form || !form.getForm().isValid()) return;
-
- sb.update_sending('Sending commands to ' + zombie.ip + '...'); // status bar update
-
- var command_module_form = form.getForm(); // form to be submitted when execute button is pressed on an command module tab
- command_module_form.submit({
- params: { // insert the nonce with the form
- nonce: Ext.get ("nonce").dom.value
- },
- success: function() {
- sb.update_sent("Commands sent to zombie " + zombie.ip); // status bar update
- },
- failure: function() {
- sb.update_fail("Error!"); // status bar update
- }
- });
- }
- }]
- });
-
- Ext.each(xhr.definition.Data, function(input) {
- var value = null;
-
- if(typeof input == 'string') {
- value = xhr.data[input];
- }
-
- if(typeof input == 'object' && typeof input[0] == 'object') {
- value = xhr.data[input[0]['name']]
- }
-
- generate_form_input_field(form, input, value, false, zombie);
- });
-
- var grid_store = new Ext.data.JsonStore({
- url: '/ui/modules/select/command_results.json?command_id='+command_id,
- storeId: 'command-results-store-zombie-'+zombie.session,
- root: 'results',
- remoteSort: false,
- autoDestroy: true,
- fields: [
- {name: 'date', type: 'date', dateFormat: 'timestamp'},
- {name: 'data'}
- ]
- });
-
- Ext.TaskMgr.start({
- run: function(task) {
- var grid = Ext.getCmp('command-results-grid-zombie-'+zombie.session);
- //here we have to check for the existance of the grid before reloading
- //because we do not want to reload the store if the tab has been closed.
- if(grid_store && grid) {
- grid_store.reload();
- }
- },
- interval: 4000
- });
-
- var grid = new Ext.grid.GridPanel({
- id: 'command-results-grid-zombie-'+zombie.session,
- store: grid_store,
- border: false,
- hideHeaders: true,
- title: 'Command results',
-
- viewConfig: {
- forceFit:true
- },
-
- columns:[new Ext.grid.RowNumberer({width: 20}), {
- dataIndex: 'date',
- sortable: false,
- renderer: function(value, p, record) {
- html = String.format("';
-
- for(index in record.data.data) {
- result = record.data.data[index];
- index = index.toString().replace('_', ' ');
-
- html += String.format('{0}: {1}
', index, result);
- }
-
- html += '
- Command does not work against this target
- It is unknown if this command works against this target
- The command works against the target, but may be visible to the user
- The command works against the target and should be invisible to the userBasic status bar component that can be used as the bottom toolbar of any {@link Ext.Panel}. In addition to - * supporting the standard {@link Ext.Toolbar} interface for adding buttons, menus and other items, the StatusBar - * provides a greedy status element that can be aligned to either side and has convenient methods for setting the - * status text and icon. You can also indicate that something is processing using the {@link #showBusy} method.
- *
-new Ext.Panel({
- title: 'StatusBar',
- // etc.
- bbar: new Ext.ux.StatusBar({
- id: 'my-status',
-
- // defaults to use when the status is cleared:
- defaultText: 'Default status text',
- defaultIconCls: 'default-icon',
-
- // values to set initially:
- text: 'Ready',
- iconCls: 'ready-icon',
-
- // any standard Toolbar items:
- items: [{
- text: 'A Button'
- }, '-', 'Plain Text']
- })
-});
-
-// Update the status bar later in code:
-var sb = Ext.getCmp('my-status');
-sb.setStatus({
- text: 'OK',
- iconCls: 'ok-icon',
- clear: true // auto-clear after a set interval
-});
-
-// Set the status bar to show that something is processing:
-sb.showBusy();
-
-// processing....
-
-sb.clearStatus(); // once completeed
-
-// Create a left-aligned status bar containing a button,
-// separator and text item that will be right-aligned (default):
-new Ext.Panel({
- title: 'StatusBar',
- // etc.
- bbar: new Ext.ux.StatusBar({
- defaultText: 'Default status text',
- id: 'status-id',
- items: [{
- text: 'A Button'
- }, '-', 'Plain Text']
- })
-});
-
-// By adding the statusAlign config, this will create the
-// exact same toolbar, except the status and toolbar item
-// layout will be reversed from the previous example:
-new Ext.Panel({
- title: 'StatusBar',
- // etc.
- bbar: new Ext.ux.StatusBar({
- defaultText: 'Default status text',
- id: 'status-id',
- statusAlign: 'right',
- items: [{
- text: 'A Button'
- }, '-', 'Plain Text']
- })
-});
-{@link #defaultText}
- * will be used.
- */
- /**
- * @cfg {String} iconCls
- * A CSS class that will be initially set as the status bar icon and is
- * expected to provide a background image (defaults to '').
- * Example usage:
-// Example CSS rule:
-.x-statusbar .x-status-custom {
- padding-left: 25px;
- background: transparent url(images/custom-icon.gif) no-repeat 3px 2px;
-}
-
-// Setting a default icon:
-var sb = new Ext.ux.StatusBar({
- defaultIconCls: 'x-status-custom'
-});
-
-// Changing the icon:
-sb.setStatus({
- text: 'New status',
- iconCls: 'x-status-custom'
-});
-{@link #iconCls} applied when calling
- * {@link #showBusy} (defaults to 'x-status-busy').
- * It can be overridden at any time by passing the iconCls
- * argument into {@link #showBusy}.
- */
- busyIconCls : 'x-status-busy',
-
- //BEEF ADDED
- errorIconCls : 'x-status-error',
- validIconCls : 'x-status-valid',
-
- /**
- * @cfg {String} busyText
- * The default {@link #text} applied when calling
- * {@link #showBusy} (defaults to 'Loading...').
- * It can be overridden at any time by passing the text
- * argument into {@link #showBusy}.
- */
- busyText : 'Loading...',
- /**
- * @cfg {Number} autoClear
- * The number of milliseconds to wait after setting the status via
- * {@link #setStatus} before automatically clearing the status
- * text and icon (defaults to 5000). Note that this only applies
- * when passing the clear argument to {@link #setStatus}
- * since that is the only way to defer clearing the status. This can
- * be overridden by specifying a different wait value in
- * {@link #setStatus}. Calls to {@link #clearStatus}
- * always clear the status bar immediately and ignore this value.
- */
- autoClear : 5000,
-
- /**
- * @cfg {String} emptyText
- * The text string to use if no text has been set. Defaults to
- * ' '). If there are no other items in the toolbar using
- * an empty string ('') for this value would end up in the toolbar
- * height collapsing since the empty string will not maintain the toolbar
- * height. Use '' if the toolbar should collapse in height
- * vertically when no text is specified and there are no other items in
- * the toolbar.
- */
- emptyText : ' ',
-
- // private
- activeThreadId : 0,
-
- // private
- initComponent : function(){
- if(this.statusAlign=='right'){
- this.cls += ' x-status-right';
- }
- Ext.ux.StatusBar.superclass.initComponent.call(this);
- },
-
- // private
- afterRender : function(){
- Ext.ux.StatusBar.superclass.afterRender.call(this);
-
- var right = this.statusAlign == 'right';
- this.currIconCls = this.iconCls || this.defaultIconCls;
- this.statusEl = new Ext.Toolbar.TextItem({
- cls: 'x-status-text ' + (this.currIconCls || ''),
- text: this.text || this.defaultText || ''
- });
-
- if(right){
- this.add('->');
- this.add(this.statusEl);
- }else{
- this.insert(0, this.statusEl);
- this.insert(1, '->');
- }
- this.doLayout();
- },
-
- /**
- * Sets the status {@link #text} and/or {@link #iconCls}. Also supports automatically clearing the
- * status that was set after a specified interval.
- * @param {Object/String} config A config object specifying what status to set, or a string assumed
- * to be the status text (and all other options are defaulted as explained below). A config
- * object containing any or all of the following properties can be passed:
-// Simple call to update the text
-statusBar.setStatus('New status');
-
-// Set the status and icon, auto-clearing with default options:
-statusBar.setStatus({
- text: 'New status',
- iconCls: 'x-status-custom',
- clear: true
-});
-
-// Auto-clear with custom options:
-statusBar.setStatus({
- text: 'New status',
- iconCls: 'x-status-custom',
- clear: {
- wait: 8000,
- anim: false,
- useDefaults: false
- }
-});
-