Wade Alcorn
d2188b230c
More changed license headers
2012-11-02 15:27:01 +10:00
Wade Alcorn
23f09b919f
Changed license header
2012-11-02 14:26:10 +10:00
Wade Alcorn
b68df3d024
Changed license header
2012-11-02 14:05:15 +10:00
bcoles
abd8f538eb
Remove demos/html/passwd_manager_theft.html
...
Small syntax changes to Event Logger extension `parse()`
2012-10-25 16:38:29 +10:30
antisnatchor
f9b8e0f576
Moved admin_ui controllers for extensions in their relative extension directory.
2012-10-23 10:15:07 +11:00
antisnatchor
deffc8691c
Fixed event logger: events were not logged for a wrong data structure type check.
2012-10-23 09:50:01 +11:00
antisnatchor
9aab6f1cf4
Patched jquery-encoder to prevent exception on encoderForJavascript. Patched wterm.jquery.js to prevent XSS. Added IP/port validation to IPEC shell.
2012-10-22 17:19:46 +11:00
antisnatchor
aae9f5b66c
Removed dead code from the IPEC admin_ui tab panel.
2012-10-22 16:12:43 +11:00
antisnatchor
aa1efd1c73
Added new IPEC admin_ui tab. This includes the new Wterm-based interactive shell to communicate with the BeEF_bind shellcode.
2012-10-22 16:09:34 +11:00
antisnatchor
b8c36b206b
Added first implementation of the IPEC extension, including the malicious FirefoxExtension.
2012-10-22 15:52:15 +11:00
antisnatchor
af53f0fd0b
Catching exception in web_cloner when determining if page can be framed.
2012-10-22 15:22:04 +11:00
bcoles
042ee1b0aa
Hide QRcode for localhost/127.0.0.1 interface
2012-10-19 09:15:07 +10:30
antisnatchor
aad6228ea8
Fix issues #757 : normalizing mount points for web_cloner in case they contain params.
2012-10-11 11:21:06 +01:00
bmantra
22bb8998b2
added more default paths for the msf-autolaunch
2012-10-07 19:26:02 +02:00
bcoles
0f81e38635
Fix YAML config: extensions/social_engineering/config.yaml
...
Prevents this error due to lack of white space between array elements:
`[!] Unable to load extension configuration '/pentest/web/beef-git/extensions/social_engineering/config.yaml'`
2012-10-07 17:57:51 +10:30
bmantra
d04461d8ff
disable auto msfrpcd
2012-10-04 20:50:51 +02:00
Roos
480e797853
auto launch metasploit initial commit
2012-10-04 19:53:36 +02:00
antisnatchor
9c7c81bd7f
Web_cloner: managed a corner case when html elements are uppercase (HEAD, FORM)
2012-09-17 12:54:10 +01:00
antisnatchor
e56b083ad5
Fixed typos in readme.txt for web_cloner
2012-09-17 11:03:13 +01:00
antisnatchor
074ca17e42
Added missing cloned_page directory to web_cloner. Added readme.txt on that directory. Enabled the social engineering extension by default. Enabled all the obfuscation techniques in the evasion extension config.
2012-09-17 10:58:07 +01:00
Rich Lundeen
0b852dd308
Made namespaces consistent and expanded body
...
Adding feedback I missed earlier regarding namespaces. Also since
we're using body instead of window (for IE support), expanding the
body so that the mouse follows everywhere.
2012-09-11 23:17:50 -07:00
Rich Lundeen
2720a5a8b9
Better reliability in IE
2012-09-11 13:09:37 -07:00
Rich Lundeen
bcf842587f
Fixed several minor bugs
2012-09-10 15:36:57 -07:00
Rich Lundeen
cef72c9518
Improved Clickjacking Module
...
Rewrite of bcole's module. Adds support for multiple clicks, Javascript
event feedback, some basic framebusting evasion, and IE support
2012-09-10 14:25:46 -07:00
antisnatchor
0dd06d6ecb
Merge branch 'master' of https://github.com/beefproject/beef
2012-09-07 08:41:13 +01:00
antisnatchor
5fc56a9dfa
Social Eng. extension: added stub for mass_mailer DB structure
2012-09-07 08:41:02 +01:00
antisnatchor
6ac074d2b0
Social Eng. extension: now the web_cloner can serve modified pages as well. This is needed when the page use custom logic to submit the form. Added an example of an Edf Energy modified page.
2012-09-06 12:37:26 +01:00
antisnatchor
b3ae5f1016
Social Eng. extension: added EDG Energy template configuration in config.yaml
2012-09-06 11:30:33 +01:00
antisnatchor
64ba4686f4
Social Eng. Extension: added EDF Energy phishing template :D
2012-09-06 11:27:12 +01:00
antisnatchor
2f5fc46a8e
Social Eng. Extension: fixed a bug in mass_mailer when choosing a different template.
2012-09-06 11:26:31 +01:00
qswain2
931aeb6ee5
Fixed the module count in the ui to include sub modules (issue 708)
2012-09-03 09:46:03 -04:00
antisnatchor
31387a0aa6
Social Eng. extension: massmailer -> calling IO.popen in a secure way
2012-09-02 19:00:40 +01:00
antisnatchor
d881852216
Social Eng. extension: added notes about 'wget' and 'file' commands required for the extension.
2012-09-02 17:26:38 +01:00
antisnatchor
ed9b1d5c2e
Social Eng. Extension: webcloner ->calling IO.popen in a secure way
2012-09-02 17:25:50 +01:00
antisnatchor
ae72f9fedf
Social Eng. extension: added request.ip to interceptor logs, adapted output
2012-09-02 16:23:53 +01:00
antisnatchor
8eb0e2d973
Social Eng. Extension: Added DB structure and logic for web_cloner and interceptor.
2012-09-01 15:15:30 +01:00
antisnatchor
6b5302ef21
Social Eng. Extension: Added RESTful API calls for both mass_mailer and web_cloner
2012-08-31 14:08:08 +01:00
antisnatchor
9ea0f60138
Social Eng. extension: added default PDF attachment to config.yaml
2012-08-29 22:48:45 +01:00
antisnatchor
6409b3d98f
Social Eng. extension: mount point for phishing page is not configurable, refactored Interceptor initialization using config settings
2012-08-29 22:36:24 +01:00
antisnatchor
26c7696e0f
Social Eng. extension: if the page can be framed, load it in an overlay iFrame maintaining the hook :D
2012-08-29 21:08:07 +01:00
antisnatchor
0260181d33
Social Eng. extension: added redirection after POST interception, refactored Interceptor class
2012-08-29 19:33:14 +01:00
antisnatchor
20d2e17232
Social Eng. extension: added support for SMTP servers that do not require authentication
2012-08-29 17:50:14 +01:00
antisnatchor
92b2382e25
Social Eng. extension: added support to specify attachments, added automatic MIME type guessing
2012-08-29 17:38:37 +01:00
Jean-Louis Huynen
e86712413c
modified whitespace evasion technique to keep it simple - modified beefjs (just one line, i don't had much time to investigate my change but it seems to work better with it than without it :)
2012-08-29 18:22:22 +02:00
Jean-Louis Huynen
788cef08d3
add whitespace obfuscation technique - should work in theory - but does not in practice
2012-08-29 13:54:26 +02:00
antisnatchor
ffbd3d65b9
Social Eng. extension: various fixes, link/linktext/fromname configurable, adjusted various email headers
2012-08-27 21:30:09 +01:00
antisnatchor
df056fb688
Social Eng. extension: added configurable email templates
2012-08-27 16:10:40 +01:00
antisnatchor
26c86951a4
Social Eng. extension: added mass mailer
2012-08-27 14:30:10 +01:00
antisnatchor
558ca03ef6
Social Eng. extension: added basic structure and web cloner
2012-08-27 10:28:03 +01:00
antisnatchor
7ed9516b53
Obfuscation: removed base64 from the default chain list, added excluded_core_js option
2012-08-25 09:55:53 +01:00
