Commit Graph

1076 Commits

Author SHA1 Message Date
zinduolis
95793433fa Update copyright year to 2026 2025-12-26 19:18:05 +10:00
zinduolis
cc862ae82f Fix typos 2025-11-10 20:39:51 +10:00
zinduolis
b5b192591b Second round of Copyright date update 2024-12-25 12:43:13 +10:00
zinduolis
101020ffa0 Update copyright in rb, js and jsdocs 2024-12-25 11:40:55 +10:00
zinduolis
a5a8196792 Fix origin / domain terminology (#1688) 2024-10-23 16:07:17 +10:00
Stephen
213cd721d6 clean up modules to assist in testing 2024-04-14 11:04:18 +10:00
Stephen
f3e3e6b014 init 'creds' var 2024-03-19 14:07:45 +10:00
Stephen
312e397bb7 update year 2024-03-19 14:07:15 +10:00
Stephen
bc5915fb05 Merge branch 'master' into pr/catatonicprime/2990 2024-03-19 04:06:00 +00:00
Stephen
0d0e5c4c77 readd pdf bounce file 2024-03-19 05:54:34 +10:00
Stephen
482143067b Updated http://beefproject.com to https://beefproject.com 2023-12-31 14:46:15 +10:00
Stephen
747ddb5387 Updated http://beefproject.com to https://beefproject.com 2023-12-31 14:18:50 +10:00
jcrew99
3a486c7626 Updated Copyright 2023-12-26 22:32:31 -05:00
catatonicprime
a876233579 Report failures too. 2023-12-18 05:53:05 +00:00
catatonicprime
c199cd29e4 Adding plaintext password recovery for Cisco ASA WebVPN Sessions. 2023-12-18 05:38:43 +00:00
bcoles
ed69915062 Extensions: Demos: Modify Handler to extend the Router class (#2795)
* Extensions: Demos: Remove unused demo assets

* Extensions: Demos: Hard-code "/hook.js" hook path

* Extensions: Demos: Fix copyright header format

* Extensions: Demos: Modify Handler to extend the Router class
2023-04-03 16:55:44 +10:00
bcoles
58efd34f8c Extensions: Remove IPEC extension (#2792)
* Remove browser extension payloads from Social Engineering modules

* Extensions: Remove IPEC extension
2023-04-03 15:01:52 +10:00
bcoles
996edf9ed8 Removed several old exploits and Mass Mailer functionality (#2788)
* Modules: remove old exploits

* Social Engineering: remove old templates

* Social Engineering: Remove Mass Mailer functionality
2023-04-02 22:08:34 +10:00
bcoles
3a10a15aae cryptoloot_miner: Remove cryptoloot_miner module (#2787) 2023-04-02 21:10:30 +10:00
bcoles
3e4b4bc910 hta_powershell: Fix loading beef_url_str from config (#2732) 2023-02-26 03:31:14 +11:00
bcoles
1db0b79092 Replace URI.escape with URI::Parser.new.escape (#2727) 2023-02-25 08:51:00 +10:00
bcoles
411e0e196f 3com_officeconnect_cmd_exec: Fix reference URL (#2705) 2023-02-08 19:02:28 +10:00
bcoles
0d28649e65 Add missing copyright headers (#2706)
* extensions: dns_rebinding: Add missing copyright headers

* modules: dns_rebinding: Add missing copyright headers
2023-02-08 18:51:30 +10:00
bcoles
57a8a13511 modules: skype_xss: Use new copyright header format (#2707) 2023-02-05 14:39:13 +11:00
jcrew99
486a9bb329 Update copyright 2023 (#2675)
* updated copyright

* reverted gemfile lock changes
2022-12-31 15:36:07 +10:00
iWhacko
e69281e341 Bugfix/module html5 webcam (#2392)
* - Fix for offline browsers. Allowing you to view all executed commands in the past and details.
- fiexed a small mistake in a comment

* Revert "- Fix for offline browsers. Allowing you to view all executed commands in the past and details. - fiexed a small mistake in a comment"

This reverts commit fed79d71

* - Fixed deprecated call to "window.URL.createObjectURL" on newer browsers
- Fixed bug where no image would be shown even if the picture was taken. (image size too large)
- added option to module to choose image size.

* fixed config we default

* fix codeql

Co-authored-by: Whacko <not@gonna.tel>
Co-authored-by: wheatley <wheatand@gmail.com>
2022-07-02 18:28:08 +10:00
Isaac Powell
0221a1c7da 2364 inotes modules defect and error handling (#2374)
* Fix spelling error, add try catch handling

* update error message
2022-06-24 15:22:36 +10:00
Isaac Powell
1c395a3153 1612 update detect lastpass module (#2292)
* updated detection methods for LastPass module

* removed old detection of form tag

* refactor detection, updated module config.yaml

* comment removal

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

True!

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

not necessary to preface the text for this one?

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* Update modules/browser/detect_lastpass/command.js

Co-authored-by: bcoles <bcoles@gmail.com>

* removing redundant code

* implement field creation

* form field creation and sequential execution

* removing test beef.debug

Co-authored-by: bcoles <bcoles@gmail.com>
2022-03-30 13:44:36 +10:00
bcoles
57ab7fda84 Detect OpenNIC DNS (#2341) 2022-03-13 02:11:17 +11:00
bcoles
52996d4fc5 Detect Ethereum ENS (#2342) 2022-03-09 15:48:40 +10:00
Brendan Coles
a64480dfab Modules: Resolve many Rubocop violations 2022-01-22 12:46:42 +00:00
Brendan Coles
060a3bfae2 Modules: Rename browser/webcam to browser/webcam_flash 2022-01-22 06:58:18 +00:00
Brendan Coles
d0e2894137 Metasploit BeEF Bind: Rename instructions.txt -> README.md 2022-01-22 05:30:33 +00:00
Brendan Coles
448c3e864b Metasploit BeEF Bind: Update installation instructions for Metasploit v6 2022-01-22 05:29:56 +00:00
bcoles
9770e09d96 Update Metasploit BeEF Bind payloads for Metasploit v6 (#2226)
Fix modules for Metasploit v6.1.10-dev
2022-01-22 16:10:07 +11:00
Brendan Coles
77a30ae720 Add QEMU Monitor 'migrate' Command Execution module 2022-01-06 03:05:43 +00:00
wheatley
f33e2698a0 MAINTAINABILITY: 2257 update copyright 2022 (#2259)
* 2257 updated copyright date
2021-12-31 09:48:08 +10:00
Wanetty
b42aebd99f Fix files to msf6 2021-11-10 04:34:50 -05:00
Wanetty
77c9991a35 Fix files to msf6 2021-11-10 04:31:10 -05:00
Brendan Coles
c8595b09b7 Modules: Add apache_tomcat_examples_cookie_disclosure module 2021-11-09 05:36:33 +00:00
wheatley
b6425e4a90 Release 0.5.2.0 (#2166)
* fixed offline zombie not deleting

* Bump jsdoc-to-markdown from 6.0.1 to 7.0.1 (#2161)

Bumps [jsdoc-to-markdown](https://github.com/jsdoc2md/jsdoc-to-markdown) from 6.0.1 to 7.0.1.
- [Release notes](https://github.com/jsdoc2md/jsdoc-to-markdown/releases)
- [Commits](https://github.com/jsdoc2md/jsdoc-to-markdown/compare/v6.0.1...v7.0.1)

---
updated-dependencies:
- dependency-name: jsdoc-to-markdown
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bug: Core - 1785 Fixed public hook url configuration settings (#2163)

* added spec file for testing changes

* added local host getter to configuration class

* added default value 0.0.0.0 for local host if it's not set

* added port config getter with default

* added port config getter with default

* fixed spelling errors for port

* added public configuration values and validation

* removed logic from public port as it was not required

* added beef host to configuration class

* added beef port to configuration class and removed default http.port logic from public_port

* fixed rubocop errors and refactored spec tests

* added beef host configuration values used for external resources

* added beef url to configuration

* added spec file for testing changes

* added local host getter to configuration class

* added default value 0.0.0.0 for local host if it's not set

* added port config getter with default

* added port config getter with default

* fixed spelling errors for port

* added public configuration values and validation

* removed logic from public port as it was not required

* added beef host to configuration class

* added beef port to configuration class and removed default http.port logic from public_port

* fixed rubocop errors and refactored spec tests

* added beef host configuration values used for external resources

* added beef url to configuration

* created command spec file

* add before statement to load all enabled modules to test command class

* add spec to check if configuration instance exists by setting and accessing a config variable

* updated http proto for beef host

* reverting changes on this file, dev values set

* removed some unessessary checks

* fixed grammar test now we're only testing one configuration attribute

* added hook url for contextual usage

* refactoring admin_ui with new code usage

* fixed issue with the location of the beef.http.https.public_enabled

* refactored powershell module and extension

* adding the new config setting for public https beign enabled

* refactor qrcode extension

* replace video fake plugin refactor

* social engineering refactoring

* phonegap module refactoring

* exploit refactoing

* network module refactoing

* ipec module refactoring

* host module refactoring

* debug refactoring

* browser refactoring

* social engineering extension refactoring

* core main server refactoring

* core main console banner refactoring

* removing dev test

* fixed area with location of http.https.enabled

* changed the hook url definition to return the hook file path

* updated banners to use new configuration getters

* updated extensions and modules with the hook url change

* added new public.host configuration settings and validations for depicated usage of public

* updated to use public.port configuration

* added validation for old configuration public_port

* updated to use public https configuration setting

* updated config with new settings format

* fixed get to point to new locations

* fixed pointer to hook_file_path

* Update extensions/social_engineering/web_cloner/web_cloner.rb

Co-authored-by: bcoles <bcoles@gmail.com>

* updated enabled to enable

* making sure default configuration file does not have preset values

Co-authored-by: bcoles <bcoles@gmail.com>

* bumped versions to 0.5.2.0

* Usability: #2145. Added user input request for beef update within 'beef' install script (#2162)

* added user input request for beef update

* swaped git pull from system to backticks

* flags added for auto update and timout to input

* updated install.txt to reference the update-beef script (#2160)

Co-authored-by: Andrew Wheatley <a@andrews-mini.home>
Co-authored-by: Isaac Powell <36595182+DeezyE@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: bcoles <bcoles@gmail.com>
2021-09-12 21:33:02 +10:00
Chessmaster
ef8819d78c Update instructions.txt for recent kali linux 2021-04-18 20:16:30 +02:00
Parag Jyoti Pal
2d19294540 Fixed Gmail Phishing by updating https://accounts.google.com/ServiceLogin to https://accounts.google.com/ 2021-02-11 12:10:49 +05:30
J
4ec6ecee27 updated all of the copyright information 2021-01-11 04:48:56 +10:00
Matt Wagenknecht
72870deea6 Update config.yaml
updated URL from contextis.co.uk to contextis.com.
2020-07-31 11:31:50 -06:00
jcrew99
b0c0e6e2ba Merge pull request #1956 from beefproject/pretty_theft_empty_credentials_error
Pretty Theft Missing Credentials JS Error
2020-07-09 10:24:48 +10:00
Jack Walker
edda0188d5 Removed typo (trailing a) missed in last commit 2020-07-06 16:46:58 +10:00
Jack Walker
4fc300ff87 Replaced Array.prototype.unique with a cleaner jQuery equivalent 2020-07-06 16:24:09 +10:00
Jack Walker
a92d4d910c Fixed getElementById method being called on incorrect object causing looping failure. 2020-07-06 12:44:19 +10:00
jcrew99
1db08ad9f6 Merge pull request #1874 from bcoles/autocomplete_theft
Replace autocomplete_theft with get_autocomplete_creds
2020-04-24 10:06:52 +10:00