Thomas Mackenzie
e76f301593
added iis imitation construction page
2012-04-04 18:39:56 +01:00
antisnatchor
616b969f96
added todo for IIS 6 default root page (web server imitation)
2012-04-04 16:42:42 +01:00
antisnatchor
0067e20702
Changed HTTP response 'server' header to IIS/6 when iis is specified.
2012-04-04 16:41:15 +01:00
antisnatchor
870a182411
Added HTTP response with default Apache centos root page (web server imitation).
2012-04-04 16:33:32 +01:00
antisnatchor
454280f7de
Adjusted errors and default returns for the web server imitation.
2012-04-04 16:05:52 +01:00
antisnatchor
6bebb80f61
Added default 404 HTTP response bodies for Apache 2.2.3 and IIS 6
2012-04-04 15:47:21 +01:00
antisnatchor
1db9ccaff6
Merge branch 'master' of https://github.com/beefproject/beef
2012-03-31 14:12:52 +01:00
antisnatchor
2db4885c2f
Added comments in the main Router class.
2012-03-31 13:57:18 +01:00
antisnatchor
5474f0507a
Allowing also GET method on Access-Control-Allow-Methods (dynamic handler).
2012-03-31 13:27:59 +01:00
antisnatchor
59ac216b71
Added basic web-server imitation (overriding Server response headers, added config.yaml options).
2012-03-31 13:24:30 +01:00
antisnatchor
addc256b8c
Remove route "/" from the main router class. Must return 'not found' anyway.
2012-03-29 15:00:20 +02:00
antisnatchor
b88acd98c8
Added BeEF router superclass: it will be extended by other classes when sub-routes are needed.
2012-03-29 14:24:15 +02:00
bcoles
2bca21a41d
Minor updates to XSSRays
...
Part of issue #47
2012-03-26 16:29:15 +10:30
bcoles
45475d625b
Updated IE version detection
...
No longer modifies the DOM for every call to:
`isIE8()`
`isIE9()`
`isIE()`
2012-03-22 19:27:36 +10:30
bcoles
5329d5c147
Added support for Firefox 11
2012-03-16 13:11:20 +10:30
bcoles
e52779e72e
Fixed javaEnabled() in BeEF hook
...
- It was breaking the hook in IE6
Also fixed a couple of typos in the Local File Theft module description
2012-03-16 12:40:13 +10:30
Michele Orru
11fbeb3296
Merge pull request #643 from antisnatchor/master
...
RESTful API, from antisnatchor with love :D
2012-03-15 10:33:17 -07:00
antisnatchor
99fff273fe
removed old reference to dynamic_module table
2012-03-15 13:58:37 +01:00
antisnatchor
61efe56b10
Removed classes and requires of dynamic* tables. Not used anymore.
2012-03-15 13:56:48 +01:00
antisnatchor
4e224e63ee
added example on how to call metasploit modules with the REST api
2012-03-15 13:53:29 +01:00
antisnatchor
fec922a63c
Implemented /api/modules/ to retrieve all enabled modules
2012-03-14 16:52:25 +01:00
antisnatchor
8fdd127f17
Disabled Sinatra exception, and set the custom 404 response to 'not found.'
2012-03-14 16:26:29 +01:00
Graziano Felline
b02bdbaaa7
ISSUE 625 - corrected the bug. Added li's elements poison
2012-03-14 15:41:10 +01:00
Graziano Felline
8795c5770a
ISSUE 625 - corrected the bug. Added li's elements poison
2012-03-14 15:34:46 +01:00
antisnatchor
c3a611d12e
Implemented info/options retrieval for a specific module throught the REST API
2012-03-13 17:18:13 +01:00
antisnatchor
434f9f8e43
Now it's possible to launch command modules via the REST api (also with options), and then get execution results.
2012-03-13 12:43:10 +01:00
antisnatchor
3674f06609
Implemented /api/logs and /api/logs/hb_session, added code comments
2012-03-12 17:40:38 +01:00
antisnatchor
818f3d207e
Retrieving correct browser version with browserDetails BrowserVersion
2012-03-12 17:14:09 +01:00
bcoles
6ef889b0b1
Removed Java from hook initialization:
...
- Removed has_java
- Removed internal_ip
- Removed internal_hostname
Added function `beef.browser.javaEnabled()`
Patched function `beef.browser.hasJava()`
- should no longer break the hook in Chrome/Safari
Added `not_working` browsers to History Extraction module
2012-03-13 00:19:01 +10:30
antisnatchor
4429ab3df2
Added /api/hooks logic to retrieve online and offline HBs as json
2012-03-12 12:46:04 +01:00
antisnatchor
03cd06a014
Added stubs and registered classes for the 3 main RESTful API endpoints: hooks, modules, logs
2012-03-12 11:55:26 +01:00
antisnatchor
872272645e
Added api_token for RESTful api authentication
2012-03-12 10:27:03 +01:00
bcoles
9735a7b66f
Merge branch 'master' of https://github.com/beefproject/beef
2012-03-12 11:41:08 +10:30
antisnatchor
7dab21ff7f
First skeleton for the RESTful api using Sinatra (modular approach, not classic one).
2012-03-11 16:12:59 +01:00
radoen
a0c11fa695
Added support to intercept dynamic requests
2012-03-11 10:26:56 +01:00
unknown
dbd6baa7b0
Temporary fix to prevent hook error on Safari. I will implement a final fix tomorrow.
2012-03-07 16:19:06 +01:00
antisnatchor
8c3afcf2b9
Minor changes related to Java detection with the unsigned applet: if the browser is Chrome, we simply rely on window.navigator.
2012-03-06 19:56:58 +01:00
Keith Lee
cc9756cf59
Fix for issues 567 and also remove multiple calls to beef.browser.hasJava() from /beef/core/main/client/net/local.js
2012-03-07 01:46:51 +08:00
Keith Lee
97672966df
Fix for issues 567 and also remove multiple calls to beef.browser.hasJava() from /beef/core/main/client/net/local.js
2012-03-07 01:41:27 +08:00
Keith Lee
95f7e92011
Changes to command module and get_physical location so that @datastore['cid'] , @datastore['results'] and @datastore['beefhook'] can be called from the modules
2012-03-05 03:40:46 +08:00
antisnatchor
e9a6049e58
Fixes issue 621: Added 2 new command line options. Now it's psosible to specify a different config.yaml file. Also changed the core load order, adding a new bootstrap module.
2012-03-04 14:55:03 +01:00
Wade Alcorn
275bbfaad2
Updates to test jenkins
2012-02-26 21:35:03 +10:00
Mike Haworth
5e138395d4
Partial fix for issue #100 , now detects build version of flash
2012-02-18 14:17:12 +13:00
antisnatchor
5bc6745e03
Fixed issue 66: base64'ed the iframe src in case of Chrome/Safari to bypass the webkit anti-XSS filter
2012-02-15 16:01:46 +01:00
antisnatchor
58f2b4f7a1
Added detection of Chrome 17
2012-02-15 16:01:45 +01:00
Christian Frichot
4a92d3174c
Removed extended_in_modules code. See Issue #147
2012-02-15 16:01:45 +01:00
antisnatchor
1d74d7eeab
Fixed a serious bug in beef.net.request when sending cross-domain POST data. jQuery is automatically changing the method to GET if the dataType (that was hardcoded in our code) is set to 'script'.
2012-02-15 16:00:38 +01:00
Wade Alcorn
76fdb6421c
The framework gracefully exits if the port is in use.
...
Fixes issue #555
https://github.com/beefproject/beef/issues/555
2012-01-11 21:56:17 +10:00
bcoles
a6986e3960
Added detection for Chrome 16, updated Chrome Extensions modules and
...
split the Details tab "Browser Hook Initialization" into "Hooked Page",
"Browser" and "Host"
2012-01-04 18:52:34 +10:30
Wade Alcorn
06899ca267
Year updated from 2011 to 2012
2011-12-31 22:24:36 +10:00
