antisnatchor
473f71e42d
Added missing WebOS constant/image that were preventing admin_ui to work properly.
2012-06-27 10:23:43 +01:00
bcoles
4432a9e468
Added module: Create Invisible Iframe
2012-06-27 01:50:07 +09:30
bcoles
7686d55b4b
Added hardware detection for HTC, Motorola, Google Nexus, Nokia, Sony
...
Ericsson
2012-06-26 18:52:03 +09:30
bcoles
123b81b2b4
Updated virgin_superhub_csrf module
...
Now disables firewall and enabled remote administration
Fixes issue #705
Fixes issue #706
Fixes issue #707
2012-06-25 11:18:28 +09:30
bcoles
d5acc6409e
Added beef.browser.hasPhonegap()
...
Added hasPhonegap() and hasGooglegears() to balloon messages
Updated os in module configs from "iPhone" to "iOS"
2012-06-25 11:04:19 +09:30
bcoles
268ef4588f
Added device/hardware detection
2012-06-25 01:35:33 +09:30
bcoles
9440afacc9
Removed duplicate / from a few CSRF URLs
...
Just in case it causes issues
2012-06-25 00:57:26 +09:30
bcoles
7fde875d8a
Changed default target IP address to http://192.168.100.1/ for the
...
virgin_superhub_csrf module
2012-06-24 22:21:19 +09:30
bcoles
ebe205ad36
Updated a couple of module configs
...
modules/exploits/router/virgin_superhub_csrf/config.yaml
modules/misc/local_file_theft/config.yaml
2012-06-24 20:44:06 +09:30
bcoles
71133869e4
Added browser details to Hooked Browser balloon messages
...
Fixes issue #521
2012-06-24 20:36:10 +09:30
bcoles
90462c32b8
Merge branch 'master' of https://github.com/beefproject/beef
2012-06-24 17:12:57 +09:30
bcoles
1bf9061c1a
Added a couple of CSRF modules:
...
o ./modules/exploits/boastmachine_3_1_add_user_csrf/
o ./modules/exploits/axous_1_1_1_add_user_csrf/
Updated a few exploit titles
2012-06-24 17:10:37 +09:30
Wade Alcorn
2cb40530de
Merge branch 'master' of github.com:beefproject/beef
2012-06-24 08:28:21 +01:00
bcoles
771d6d60f9
Added Virgin Superhub CSRF module
...
Fixes issue #703
2012-06-24 15:22:35 +09:30
bcoles
40f8b528aa
Moved a few modules from modules/exploits/ to modules/exploits/local_host:
...
activex_command_execution
mozilla_nsiprocess_interface
window_mail_client_dos
java_payload
safari_launch_app
Added a couple of XSS modules:
cisco_collaboration_server_5_xss
serendipity_1.6_xss
2012-06-24 03:10:54 +09:30
bcoles
aefc693548
Added balloon popups to hooked browser tree
...
Part of issue #521
2012-06-24 00:57:01 +09:30
bcoles
853b4c5bcb
Added Spring Framework Malicious JAR module
...
Fixes issue #526
2012-06-23 22:45:48 +09:30
Wade Alcorn
49b85201d0
Changed print_success to print_info
2012-06-23 12:51:20 +01:00
Wade Alcorn
900942f59c
Added comment
2012-06-23 09:06:17 +01:00
Wade Alcorn
c4e0ce17c4
Added update file that calls git pull
2012-06-22 21:07:45 +01:00
Wade Alcorn
0a34150cf7
Version updated
2012-06-22 21:01:09 +01:00
antisnatchor
aa8e073494
Changes debug logs in the evasion main class.
2012-06-21 12:34:26 +01:00
Mike Haworth
37e42b50d0
Moved screenshot module to correct location
2012-06-14 06:09:44 +12:00
Michele Orru
dae01474ab
Merge pull request #700 from bmantra/master
...
Closes #699
2012-06-13 04:54:30 -07:00
bmantra
ece65e9841
added fingerprint for Glassfish server
2012-06-13 13:38:48 +02:00
Mike Haworth
cb9125eb1a
added a chrome_extension module that takes a screenshot of the current tab, image returned as dataurl for now
2012-06-13 21:33:47 +12:00
Michele Orru
29d576b2e7
Merge pull request #696 from bmantra/master
...
Closes #661 Glassfish 3.1.1 war upload csrf
2012-06-13 01:47:55 -07:00
bmantra
3accb24b2b
Does not work in Opera due to cross domain issues. And cannot work in IE due to lack of sendAsBinary-functionality in xmlhttprequest. So removed the Base64-library and used atob instead.
2012-06-13 10:00:45 +02:00
root
27ed3ac2da
Merge remote branch 'upstream/master'
2012-06-08 08:30:35 +02:00
bcoles
99c6a819f3
Updated module description for webcam and gmail phishing modules
...
Updated gmail phishing module to hide the polling image
Fixed a couple of typos
2012-06-07 13:56:26 +09:30
Brendan Coles
3430de2a03
Merge pull request #691 from floyd-fuh/master
...
Webcam and Gmail Phishing plugin
2012-06-06 21:36:45 -07:00
bcoles
6f3298235f
Added IE to not_working for glassfish_war_upload_xsrf module
2012-06-07 13:29:59 +09:30
floyd
475cc4e40d
Added Gmail phishing module
2012-06-06 18:49:17 +01:00
floyd
dbae1f60dd
Added webcam module
2012-06-06 18:47:48 +01:00
bcoles
6396f7aa5a
Fixes issue #688
...
Added spaces to comma delemetered data in config.yaml files
This should fix an issue reported to affect Ruby 1.9.2
2012-06-05 23:27:21 +09:30
Ben Waugh
defc5987c7
Added #!/bin/bash to install script
beef-0.4.3.5
2012-06-05 07:28:50 +10:00
bmantra
ac258f654d
added not_working: ["IE"]
2012-06-04 21:24:01 +02:00
Michele Orru
1d13368644
Merge pull request #689 from bmantra/master
...
fixes #661 . Ported @malerish PoC for GlassFish (deploy WAR through XSRF)
2012-06-03 15:30:20 -07:00
root
8e7e546ef9
fixes #661
2012-06-03 19:53:33 +02:00
bcoles
729336df53
Added debug mode to clickjacking module
2012-06-01 10:49:46 +09:30
bcoles
9e2ac56ea6
Added clickjacking module
...
Fixes issue 105
2012-05-30 19:40:29 +09:30
bcoles
fdd9d2c555
Added Cross-Site Printing module
2012-05-30 17:11:34 +09:30
bcoles
d76c0a39c7
Trivial readme updates
2012-05-30 09:24:08 +09:30
bcoles
1b9153485e
Removed Induce Seizure module
...
There is no reason what so ever for browsers to be able to cause the
screen to flicker. This issue has been known for a very long time.
Maybe it's time browser developers consider the health of their users.
---
Can cows get epilepsy? Breeds such as Swedish Red Cattle, Hereford and
Angus have been reported to suffer epilepsy. Source:
http://www.kgbanswers.co.uk/can-cows-get-epilepsy/2217549
Think of the cows.
2012-05-29 20:41:41 +09:30
bcoles
8dc4261094
Updated get_all_cookies module description
2012-05-29 20:37:14 +09:30
bcoles
1c9310f89f
Added Induce Seizure module
...
Disabled by default
2012-05-29 20:02:16 +09:30
Mike Haworth
4e75c869ff
Merge branch 'master' of github.com:beefproject/beef
2012-05-29 22:44:52 +12:00
Mike Haworth
5aa2cefc43
Chrome extension module for stealling cookies inc. HTTPonly
2012-05-29 22:44:03 +12:00
Mike Haworth
172ec56be6
Got a better splash image, added cookies permission, added some brief documentation
2012-05-29 22:42:58 +12:00
bcoles
0ac7023df1
Renamed getScreenParams() to getScreenSize()
...
Added date stamp to browser hook initialization
2012-05-29 18:52:43 +09:30