Commit Graph

2941 Commits

Author SHA1 Message Date
Brendan Coles
b700039979 Update hardware detection 2017-10-14 09:48:03 +00:00
Brendan Coles
dbb5055391 Update mdetect library 2017-10-14 09:22:34 +00:00
Brendan Coles
118fcc7d6f Add mode option 2017-10-14 08:10:06 +00:00
Brendan Coles
9bbf92de68 Fix #1453 2017-10-13 16:22:34 +00:00
Brendan Coles
45847d139f Merge pull request #1454 from bcoles/coinhive_miner
Add Coinhive Miner module
2017-10-14 03:06:49 +11:00
Brendan Coles
c1a7cd11bd Add Coinhive Miner module 2017-10-13 16:02:47 +00:00
Brendan Coles
16647337e7 Add support for Firefox 56 2017-10-01 05:43:45 +00:00
Brendan Coles
75247c60a1 Merge pull request #1448 from wanton1950/1444_high_risk
#1444 high risk
2017-09-25 16:19:42 +10:00
Bucky Wilson
60108af685 Passphrase issues made clearer. 2017-09-25 15:24:14 +10:00
Bucky Wilson
b7fc40247c Capture limited password stupidity 2017-09-25 12:24:23 +10:00
Bucky Wilson
675c6a9edb Create temporary password in-lieu of using default 2017-09-25 12:00:32 +10:00
Brendan Coles
de144a0e45 Move credentials to top of config.yaml file 2017-09-24 15:15:55 +10:00
Brendan Coles
82172351e1 Add link to wiki configuration page 2017-09-24 14:49:35 +10:00
Brendan Coles
69aa2a31c1 Merge pull request #1437 from beefproject/revert-1436-patch-1
Revert "html_escape prevent code execution ."
2017-08-30 16:25:23 +10:00
Brendan Coles
0311b317b7 Revert "html_escape prevent code execution ." 2017-08-30 16:25:04 +10:00
Brendan Coles
aa3c0932ce Use in msf-exploits.cache path 2017-08-29 07:24:03 +00:00
Brendan Coles
9ab7461ac5 Merge pull request #1436 from touhidshaikh/patch-1
html_escape prevent code execution .
2017-08-29 17:00:53 +10:00
Brendan Coles
e52a1af148 Merge pull request #1434 from gregmolnar/edge_detection
detect microsoft edge
2017-08-29 16:56:42 +10:00
Touhid M Shaikh
098b9a24bf html_escape prevent code execution .
I noticed when i put HTML content in "beef-xss/config.yaml" file in Version Field.
And Restart Beef(beef_start.png) and Go to Admin Panel in my browser, then my html interpreter and execute.
This issue occurs bcz of "/beef-xss/extensions/admin_ui/controllers/panel/index.html" in this file insecure code implementetion.

NOW html_escape prevent code execution.
2017-08-25 15:41:31 +05:30
Greg Molnar
2d7cfd73f4 detect microsoft edge 2017-08-23 13:37:38 +02:00
Brendan Coles
f245d12da3 Downgrade therubyracer to 1.12.2 2017-08-15 10:35:35 +00:00
Brendan Coles
c86bdc2cfe Merge pull request #1429 from fabianfrz/fabianfrz-fix-gemfile
fix gemfile; closes #1428
2017-08-15 19:59:57 +10:00
Fabian Franz
12800215f9 fix gemfile 2017-08-15 11:03:21 +02:00
Brendan Coles
b58875c952 Add support for Firefox 54 and 55 2017-08-12 02:19:26 +00:00
Brendan Coles
1f56b835f6 Use beef.net.is_valid_ip 2017-08-12 02:03:11 +00:00
Brendan Coles
81b5182689 Add router DNS hijack modules 2017-08-12 01:47:29 +00:00
Brendan Coles
173a65be13 Add IP and port validation to beef.net 2017-08-11 06:12:15 +00:00
Brendan Coles
f545b3631b Replace gsub quotes with base64 encoding 2017-08-11 05:44:32 +00:00
Brendan Coles
50a97d3e36 Fix XSSRays when evasion is enabled - Fix #1426 2017-08-06 23:28:13 +00:00
Brendan Coles
14e788e574 Fix requester when evasion is enabled - Fix #1386 2017-08-06 22:16:40 +00:00
Brendan Coles
d5b020f9be Add evasion to build_missing_beefjs_components method 2017-08-06 22:08:04 +00:00
Brendan Coles
4f153c2de3 Support empty output messages to DNS logger 2017-08-06 22:02:55 +00:00
Brendan Coles
4ff956c9be Add tests for variable decleration with 'let' 2017-08-06 18:39:23 +00:00
Brendan Coles
5a2a74c6a7 Update dependencies 2017-08-05 16:18:33 +00:00
Brendan Coles
93ef7c0643 Update msfrpc-client dependency to v1.1.1 2017-08-04 06:05:43 +00:00
Brendan Coles
8cbe15deaa Add comment warning not to use the console extension 2017-06-30 06:31:11 +00:00
Brendan Coles
e8f9ee1234 Rollback Rack dependency to 1.6.x 2017-06-30 06:21:33 +00:00
Brendan Coles
36cc4a4dd3 Add event log RSS feed 2017-06-29 11:00:24 +00:00
Brendan Coles
f320669f56 Update dependencies 2017-06-29 05:11:51 +00:00
Brendan Coles
5f4cc87d13 Show errors from msfrpc-client 2017-06-18 03:13:23 +00:00
Brendan Coles
98c187fb38 Add NtfsCommonCreate DoS module 2017-06-01 02:24:12 +00:00
antisnatchor
9bf7fe3002 removed copyright 2017-05-31 09:01:10 +02:00
antisnatchor
c3685fcdf7 Fixed a few JS errors preventing the module from running. Tested on Edge 40 (Win10) and Chrome 58 (OSX) 2017-05-31 08:56:37 +02:00
antisnatchor
9589a70610 Merge pull request #1401 from SkyLined/master
Add ORTC, fix WebRTC bug
2017-05-31 08:41:11 +02:00
SkyLined
992e9235c7 Add ORTC, fix WebRTC bug
* Add Object-RTC implementation that should work in Edge 38.
* Fix issue where WebRTC implementation could report partial results if there are multiple local IP addresses (e.g. multiple network cars, IPv4 & IPv6, ...). In such cases, the results would be reported for each IP address, where they should only be reported once, after all IP addresses have been enumerated.
* All indentation is now 4 spaces.
2017-05-30 20:59:40 +02:00
Brendan Coles
dd47856c91 Add Detect Coupon Printer module 2017-05-20 17:37:44 +00:00
Brendan Coles
1dfc03e6e7 Add popunder persistence module with popup blocker bypass for IE 2017-05-20 14:18:35 +00:00
Brendan Coles
7ef36039a4 Add detection for WebGL support to BrowserDetails 2017-05-13 06:36:58 +00:00
Brendan Coles
2c43328614 Add detection for Web Worker support to BrowserDetails 2017-05-13 06:18:20 +00:00
Brendan Coles
9a9b826364 Update browser details from module post_execute 2017-05-12 14:24:14 +00:00