Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Trying to automate API server

Browse Source
This commit is contained in:
Jack Walker
2020-04-09 13:03:08 +10:00
parent 71cecf4e5e
commit d8fac13f8f
1 changed files with 38 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

49
spec/beef/modules/debug/test_beef_debugs_spec.rb
View File

@@ -12,24 +12,51 @@ require_relative '../../../support/beef_test'
RSpec.describe 'BeEF Debug Command Modules:' do
before(:each) do
# Note: rake spec passes --patterns which causes BeEF to pickup this argument via optparse. I can't see a better way at the moment to filter this out. Therefore ARGV=[] for this test.
ARGV = []
# Grab config and set creds in variables for ease of access
@config = BeEF::Core::Configuration.instance
@username = @config.get('beef.credentials.user')
@password = @config.get('beef.credentials.passwd')
# Spawn HTTP Server
http_hook_server = BeEF::Core::Server.instance
http_hook_server.prepare
@pids = fork do
BeEF::API::Registrar.instance.fire(BeEF::API::Server, 'pre_http_start', http_hook_server)
end
@pid = fork do
http_hook_server.start
end
# Wait for server to start
sleep 2
@restclient = BeefRestClient.new('http', ATTACK_DOMAIN, '3000', @username, @password)
# Authenticate to RESTful API endpoint to generate token for future tests
response = RestClient.post "#{RESTAPI_ADMIN}/login",
response = @restclient.post "#{RESTAPI_ADMIN}/login",
{ 'username': "#{@username}",
'password': "#{@password}" }.to_json,
:content_type => :json
@token = JSON.parse(response)['token']
hooks = RestClient.get "#{RESTAPI_HOOKS}?token=#{@token}"
hooks = @restclient.get "#{RESTAPI_HOOKS}?token=#{@token}"
@session = JSON.parse(hooks)['hooked-browsers']['online']['0']['session']
# Hook new victim
victim = BeefTest.new_victim
end
after(:each) do
Process.kill("KILL",@pid)
Process.kill("KILL",@pids)
end
describe 'Test_beef.debug() command module' do
it 'successfully executes' do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/27?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/27?token=#{@token}",
{ "msg": "Testing Test_beef.debug() command module" }.to_json,
:content_type => :json
result_data = JSON.parse(response.body)
@@ -39,7 +66,7 @@ RSpec.describe 'BeEF Debug Command Modules:' do
describe 'Return ASCII Characters command module' do
it 'successfully executes' do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/25?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/25?token=#{@token}",
{ }.to_json,
:content_type => :json
result_data = JSON.parse(response.body)
@@ -49,7 +76,7 @@ RSpec.describe 'BeEF Debug Command Modules:' do
describe 'Return Image command module' do
it "successfully executes" do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/22?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/22?token=#{@token}",
{ }.to_json,
:content_type => :json
result_data = JSON.parse(response.body)
@@ -59,7 +86,7 @@ RSpec.describe 'BeEF Debug Command Modules:' do
describe "Test HTTP Redirect command module" do
before(:each) do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/24?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/24?token=#{@token}",
{ }.to_json,
:content_type => :json
result_data = JSON.parse(response.body)
@@ -67,14 +94,14 @@ RSpec.describe 'BeEF Debug Command Modules:' do
end
it 'is successfully redirected to the specified URL' do
redirect_response = RestClient.get "http://#{ATTACK_DOMAIN}:3000/redirect"
redirect_response = @restclient.get "http://#{ATTACK_DOMAIN}:3000/redirect"
expect(redirect_response.request.url).to eq "https://beefproject.com/"
end
end
describe "Test Returning Results/Long String command module" do
it "successfully executes" do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/29?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/29?token=#{@token}",
{ "repeat": 20,
"repeat_string": "beef" }.to_json,
:content_type => :json
@@ -85,7 +112,7 @@ RSpec.describe 'BeEF Debug Command Modules:' do
describe "Test Network Request command module" do
it "successfully executes" do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/29?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/29?token=#{@token}",
{ "scheme": "http",
"method": "GET",
"domain": "#{ATTACK_DOMAIN}",
@@ -103,7 +130,7 @@ RSpec.describe 'BeEF Debug Command Modules:' do
describe "Test DNS Tunnel command module" do
it "successfully executes" do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/26?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/26?token=#{@token}",
{ "domain": "example.com",
"data": "Lorem ipsum" }.to_json,
:content_type => :json
@@ -114,7 +141,7 @@ RSpec.describe 'BeEF Debug Command Modules:' do
describe "Test CORS Request command module" do
it "successfully executes" do
response = RestClient.post "#{RESTAPI_MODULES}/#{@session}/30?token=#{@token}",
response = @restclient.post "#{RESTAPI_MODULES}/#{@session}/30?token=#{@token}",
{ "method": "GET",
"url": "example.com",
"data": {