Added DNS and ETag covert channels

modules/debug/test_get_variable/command.js

@@ -0,0 +1,20 @@
+//
+// Copyright (c) 2006-2014 Wade Alcorn - wade@bindshell.net
+// Browser Exploitation Framework (BeEF) - http://beefproject.com
+// See the file 'doc/COPYING' for copying permission
+//
+
+/*
+This JavaScript gets value of the specified variable that was set in another script via Window property.
+*/
+
+beef.execute(function() {
+
+ var payload = "<%= @payload_name %>";
+ var curl = "<%= @command_url %>";
+ var cid = "<%= @command_id %>";
+ 
+ console.log("The current value of " + payload + " is " + Window[payload]);
+ beef.net.send(curl, parseInt(cid),'get_variable=true');
+
+});

modules/debug/test_get_variable/config.yaml

@@ -0,0 +1,15 @@
+#
+# Copyright (c) 2006-2014 Wade Alcorn - wade@bindshell.net
+# Browser Exploitation Framework (BeEF) - http://beefproject.com
+# See the file 'doc/COPYING' for copying permission
+#
+beef:
+    module:
+        test_get_variable:
+            enable: false
+            category: "Debug"
+            name: "Test JS variable passing"
+            description: "Test for JS variable passing from another BeEF's script via Window object"
+            authors: ["dnkolegov"]
+            target:
+                 working: ["All"]

modules/debug/test_get_variable/module.rb

@@ -0,0 +1,12 @@
+#
+# Copyright (c) 2006-2014 Wade Alcorn - wade@bindshell.net
+# Browser Exploitation Framework (BeEF) - http://beefproject.com
+# See the file 'doc/COPYING' for copying permission
+#
+class Test_get_variable < BeEF::Core::Command
+
+  def self.options
+    return [{'name' => 'payload_name', 'ui_label'=>'Payload Name', 'type' => 'text', 'value' => 'message', 'width' => '400px'}]
+  end
+
+end