Commit Graph

2846 Commits

Author SHA1 Message Date
Brendan Coles
1334456d9e Remove xmlrpc/client from core/loader 2017-04-12 12:04:11 +00:00
Brendan Coles
dba31548aa Add nokogiri to Gemfile 2017-04-12 12:03:44 +00:00
Brendan Coles
fdda8b5d05 Update dependencies 2017-04-12 09:44:40 +00:00
Brendan Coles
fc2a93ac13 Update rubyzip gem (CVE-2017-5946) 2017-04-12 09:19:11 +00:00
Brendan Coles
6b1d610c1f Add ARG-W4 ADSL Router DNS Hijack CSRF module 2017-04-12 04:26:56 +00:00
Brendan Coles
d3d41301a3 Update Tenda ADSL Router DNS Hijack module 2017-04-12 04:25:53 +00:00
Brendan Coles
880f63a9ff Warn on startup if default credentials in use 2017-04-10 18:51:31 +00:00
Brendan Coles
d7fd3acf23 Update minimum supported Ruby version to 2.2 2017-04-10 18:43:16 +00:00
Brendan Coles
a03164f212 Add click event handler to popunder window module 2017-04-10 18:30:26 +00:00
Brendan Coles
5d927d9d1b Add rake to Gemfile test group 2017-04-10 16:46:31 +00:00
Brendan Coles
1a68c165bb Add missing libraries to beefjs - Part of #1323 2017-04-10 16:46:01 +00:00
Brendan Coles
6839374199 Replace Detect Software module 2017-04-09 17:19:20 +00:00
Brendan Coles
5f412678c2 Merge pull request #1385 from almostwhitehat/fix-chunked-encoding
Omit Transfer-Encoding header in proxy responses
2017-04-10 03:03:52 +10:00
Brendan Coles
475f8395d7 Remove Fingerprint OS module 2017-04-09 17:11:20 +00:00
Matt Metzger
f0fdc3d537 Omit Transfer-Encoding header in proxy responses
Beef automatically calculates and inserts a Content-Length header when
sending proxy responses. If the Transfer-Encoding header is not
stripped, many browsers treat this as a Content-Length of 0, thus
rendering an empty body.
2017-04-09 01:20:32 -04:00
Brendan Coles
a083fc2b63 Add Detect Users module 2017-04-07 08:33:44 +00:00
Brendan Coles
50855d8f10 Add Detect Local Drives module 2017-04-07 08:32:01 +00:00
Brendan Coles
b039b4a1d1 Merge pull request #1379 from dpatrongomez/master
Improved design
2017-04-02 23:50:40 +10:00
Daniel Patrón Gómez
bc2626767c Update LinkedIn logo 2017-03-26 14:37:44 +02:00
Daniel Patrón Gómez
0ce9807335 Improved design 2017-03-26 14:26:31 +02:00
Brendan Coles
089bacd0a2 Remove therubyracer dependency 2017-03-15 14:54:40 +00:00
Brendan Coles
6ca5341eb1 Merge pull request #1373 from gusbo/patch-1
Update command.js
2017-03-07 00:50:54 +11:00
Gustav Boström
a4fb447153 Update command.js 2017-03-06 13:56:07 +01:00
Gustav Boström
d58064443a Update command.js
Remove the trailing });. The Get Cookie-module stopped working for me, but works again after I remove the last line which seems lika a bug to me.
I get an error "Unexpected token }" in the Chrome JavaScript-console of the hooked browser when I invoke the module from the BeeF- UI.
2017-03-06 13:37:14 +01:00
Brendan Coles
7e8e22a9c3 Merge pull request #1370 from nstarke/branches/netgear-dgn2000
Adding Netgear DGN2000 WAN Remote Management CSRF Module
2017-02-26 12:40:07 +11:00
Brendan Coles
4384ba1563 Merge pull request #1368 from nstarke/branches/dlink_dgs_110-fdb-whitelist
Adding DLink DGS 1100 FDB Whitelist module
2017-02-26 12:38:17 +11:00
Brendan Coles
0bcf0b473d Merge pull request #1367 from nstarke/branches/dlink_dgs_1110-device-reset
Adding DLink DGS 1100 Switch Device Reset CSRF Module
2017-02-26 12:38:04 +11:00
Brendan Coles
9203bb1e32 Merge pull request #1369 from nstarke/branches/dlink_dgs_1100-port-mirroring
Adding DLink DGS 1100 Port Mirroring module
2017-02-26 12:37:59 +11:00
Nicholas Starke
ab0c0278c6 Adding Netgear DGN2000 WAN Remote Management CSRF Module 2017-02-25 09:52:22 -06:00
Nicholas Starke
f3b797475c Adjusting to use XsrfForm 2017-02-25 08:08:37 -06:00
Nicholas Starke
558646bd85 Adjusting to use XsrfForm 2017-02-25 08:03:45 -06:00
Nicholas Starke
a71030efa6 Converting to use XsrfForm 2017-02-25 07:51:37 -06:00
Nicholas Starke
e62c8b3316 Adding DLink DGS 1100 Port Mirroring module 2017-02-23 19:26:43 -06:00
Nicholas Starke
37b83e3a38 Adding DLink DGS 110 DB Whitelist module 2017-02-23 19:23:45 -06:00
Nicholas Starke
14d60c57d8 Adding DLink DGS 1100 Switch Device Reset CSRF Module 2017-02-23 19:20:13 -06:00
Brendan Coles
915869f23a Change 'working' to 'user_notify' 2017-02-22 19:08:56 +00:00
Brendan Coles
e3a934af12 Move exploits/pfsense module to exploits/pfsense/pfsense_reverse_root_shell_csrf 2017-02-22 15:15:02 +00:00
Brendan Coles
1b5885db34 Merge pull request #1366 from yanncam/pfSense_2.3.2_RCE
Add pfSense <= 2.3.2 Reverse root shell via CSRF/XSS exploit module
2017-02-23 01:40:23 +11:00
yanncam
2f632bcbcd Add pfSense <= 2.3.2 Reverse root shell via CSRF/XSS exploit module 2017-02-22 14:38:43 +01:00
Brendan Coles
0527be31dd Merge pull request #1364 from bcoles/invisible_htmlfile_activex
Add Invisible HTMLFile ActiveX persistence module
2017-02-22 01:33:59 +11:00
Brendan Coles
fdd1a6775b Update config.yaml 2017-02-22 01:32:52 +11:00
Brendan Coles
32bbe32183 Update command.js 2017-02-22 01:32:15 +11:00
Brendan Coles
c20ba2a75d Add Invisible HTMLFile ActiveX persistence module 2017-02-21 14:37:19 +00:00
Brendan Coles
86f6d3d2f8 Add support for Firefox 51 2017-02-08 12:13:09 +00:00
Brendan Coles
74de77e157 Updated Copyright information 2017-02-05 05:39:31 +00:00
Brendan Coles
59fecdcce3 Test if supplied IP address is valid dot-decimal format 2017-02-05 05:28:30 +00:00
Brendan Coles
06263790c8 Test if supplied IP address is valid dot-decimal format 2017-02-04 22:20:48 +00:00
Brendan Coles
ce849dc12a Merge pull request #1352 from benichmt1/get_cookie-status
Get cookie ARE status update
2017-02-04 11:21:35 +11:00
Michael Benich
0b606f8d79 Send status messages 2017-02-03 16:45:12 -05:00
Michael Benich
408e18c0c6 Add json for get_cookie 2017-02-03 15:32:07 -05:00