Commit Graph

2956 Commits

Author SHA1 Message Date
Brendan Coles
7b682bde4b Merge pull request #1452 from Und3rf10w/pushover
Add Pushover notification channel
2017-10-15 21:44:57 +11:00
Brendan Coles
9d8a311e72 Add geoip dependency to BrowserDetails 2017-10-15 09:27:00 +00:00
Brendan Coles
2749d6620a Add rubydns dependency to extension 2017-10-15 08:56:19 +00:00
Brendan Coles
e1760d74c8 Remove gem deps from core/loader 2017-10-15 08:47:13 +00:00
Brendan Coles
6c21da3cf5 Add rushover dependency to Gemfile 2017-10-15 06:02:07 +00:00
Brendan Coles
16973ccd48 Add Coinhive Miner ARE rule 2017-10-14 17:01:25 +00:00
Brendan Coles
8905ea2ce4 Update dependencies 2017-10-14 16:42:20 +00:00
Brendan Coles
f4cca7a479 Fix IE plugin detection 2017-10-14 15:59:11 +00:00
Brendan Coles
68099ddf17 Add checks for mobile devices and browser capabilities 2017-10-14 12:32:57 +00:00
Brendan Coles
b700039979 Update hardware detection 2017-10-14 09:48:03 +00:00
Brendan Coles
dbb5055391 Update mdetect library 2017-10-14 09:22:34 +00:00
Brendan Coles
118fcc7d6f Add mode option 2017-10-14 08:10:06 +00:00
Brendan Coles
9bbf92de68 Fix #1453 2017-10-13 16:22:34 +00:00
Brendan Coles
45847d139f Merge pull request #1454 from bcoles/coinhive_miner
Add Coinhive Miner module
2017-10-14 03:06:49 +11:00
Brendan Coles
c1a7cd11bd Add Coinhive Miner module 2017-10-13 16:02:47 +00:00
Jonathan Echavarria
63e9e72194 add gem install warning to notifications config 2017-10-05 09:47:43 -04:00
Jonathan Echavarria
1b5e56e4a6 removed debug line from pushover notification channel 2017-10-05 09:45:59 -04:00
Jonathan Echavarria
27d1166869 set pushover to be disabled by default 2017-10-05 09:44:35 -04:00
Jonathan Echavarria
409d9962bb modified the notifications extenion to add pushover support 2017-10-05 09:43:11 -04:00
Jonathan Echavarria
d47303f0e7 changed config.yaml to add pushover support 2017-10-05 09:40:36 -04:00
Jonathan Echavarria
c01febbe9b added pushover channel 2017-10-05 09:39:39 -04:00
Brendan Coles
16647337e7 Add support for Firefox 56 2017-10-01 05:43:45 +00:00
Brendan Coles
75247c60a1 Merge pull request #1448 from wanton1950/1444_high_risk
#1444 high risk
2017-09-25 16:19:42 +10:00
Bucky Wilson
60108af685 Passphrase issues made clearer. 2017-09-25 15:24:14 +10:00
Bucky Wilson
b7fc40247c Capture limited password stupidity 2017-09-25 12:24:23 +10:00
Bucky Wilson
675c6a9edb Create temporary password in-lieu of using default 2017-09-25 12:00:32 +10:00
Brendan Coles
de144a0e45 Move credentials to top of config.yaml file 2017-09-24 15:15:55 +10:00
Brendan Coles
82172351e1 Add link to wiki configuration page 2017-09-24 14:49:35 +10:00
Brendan Coles
69aa2a31c1 Merge pull request #1437 from beefproject/revert-1436-patch-1
Revert "html_escape prevent code execution ."
2017-08-30 16:25:23 +10:00
Brendan Coles
0311b317b7 Revert "html_escape prevent code execution ." 2017-08-30 16:25:04 +10:00
Brendan Coles
aa3c0932ce Use in msf-exploits.cache path 2017-08-29 07:24:03 +00:00
Brendan Coles
9ab7461ac5 Merge pull request #1436 from touhidshaikh/patch-1
html_escape prevent code execution .
2017-08-29 17:00:53 +10:00
Brendan Coles
e52a1af148 Merge pull request #1434 from gregmolnar/edge_detection
detect microsoft edge
2017-08-29 16:56:42 +10:00
Touhid M Shaikh
098b9a24bf html_escape prevent code execution .
I noticed when i put HTML content in "beef-xss/config.yaml" file in Version Field.
And Restart Beef(beef_start.png) and Go to Admin Panel in my browser, then my html interpreter and execute.
This issue occurs bcz of "/beef-xss/extensions/admin_ui/controllers/panel/index.html" in this file insecure code implementetion.

NOW html_escape prevent code execution.
2017-08-25 15:41:31 +05:30
Greg Molnar
2d7cfd73f4 detect microsoft edge 2017-08-23 13:37:38 +02:00
Brendan Coles
f245d12da3 Downgrade therubyracer to 1.12.2 2017-08-15 10:35:35 +00:00
Brendan Coles
c86bdc2cfe Merge pull request #1429 from fabianfrz/fabianfrz-fix-gemfile
fix gemfile; closes #1428
2017-08-15 19:59:57 +10:00
Fabian Franz
12800215f9 fix gemfile 2017-08-15 11:03:21 +02:00
Brendan Coles
b58875c952 Add support for Firefox 54 and 55 2017-08-12 02:19:26 +00:00
Brendan Coles
1f56b835f6 Use beef.net.is_valid_ip 2017-08-12 02:03:11 +00:00
Brendan Coles
81b5182689 Add router DNS hijack modules 2017-08-12 01:47:29 +00:00
Brendan Coles
173a65be13 Add IP and port validation to beef.net 2017-08-11 06:12:15 +00:00
Brendan Coles
f545b3631b Replace gsub quotes with base64 encoding 2017-08-11 05:44:32 +00:00
Brendan Coles
50a97d3e36 Fix XSSRays when evasion is enabled - Fix #1426 2017-08-06 23:28:13 +00:00
Brendan Coles
14e788e574 Fix requester when evasion is enabled - Fix #1386 2017-08-06 22:16:40 +00:00
Brendan Coles
d5b020f9be Add evasion to build_missing_beefjs_components method 2017-08-06 22:08:04 +00:00
Brendan Coles
4f153c2de3 Support empty output messages to DNS logger 2017-08-06 22:02:55 +00:00
Brendan Coles
4ff956c9be Add tests for variable decleration with 'let' 2017-08-06 18:39:23 +00:00
Brendan Coles
5a2a74c6a7 Update dependencies 2017-08-05 16:18:33 +00:00
Brendan Coles
93ef7c0643 Update msfrpc-client dependency to v1.1.1 2017-08-04 06:05:43 +00:00