Brendan Coles
b89ca6baa3
Add jQuery BlockUI plugin to hook
2015-08-18 13:47:09 +00:00
Brendan Coles
cf2f1093a7
Add support for Firefox 40
2015-08-15 06:59:15 +00:00
Brendan Coles
e22c5ea7e2
Use beef.debug in deployJava.js
2015-08-04 14:58:34 +00:00
antisnatchor
050cc3edfd
Fixed #1151
2015-07-30 10:46:12 +02:00
antisnatchor
d34f97c4cb
Fixed #1147 (introduced with one of the latest commits :-)
2015-07-29 16:19:07 +02:00
antisnatchor
605a71d38a
cutting string with [start..end] rather than split() for more accurate parsing.
2015-07-29 11:13:03 +02:00
antisnatchor
520d62a3f9
Reduced browser/os_version max length to 15 chars.
2015-07-29 10:59:27 +02:00
antisnatchor
39d85d4b53
Added TODO for better cpu detection on != Win
2015-07-29 10:41:02 +02:00
antisnatchor
568f63f13d
Refactored the cpu detection JS code. Now starts to detect if the target is 64 bit, then moves to the other checks.
2015-07-29 10:25:32 +02:00
antisnatchor
157fd4104b
Added code comments about eval usage :-)
2015-07-28 14:12:27 +02:00
antisnatchor
4d0f1981c2
Added RESTful API calls to delete and list rulesets.
2015-07-28 11:41:46 +02:00
antisnatchor
b81f7c6953
Small changes in some rulesets, fixed old code comments.
2015-07-28 10:29:50 +02:00
antisnatchor
031f587421
Removed fixed TODOs
2015-07-27 16:38:03 +02:00
antisnatchor
4334dd1e54
Using same variable convention for consistency
2015-07-27 15:49:12 +02:00
antisnatchor
6f5b025acc
Added more restrictions on browser/os version definitions
2015-07-27 14:02:20 +02:00
antisnatchor
e3a20adeb0
Re-added config object
2015-07-27 13:29:47 +02:00
antisnatchor
3c80da5776
Added support for Chrome 44
2015-07-27 12:21:44 +02:00
antisnatchor
bdecbd21a0
Merged changed from master branch, disabled ARE rules by default.
2015-07-27 10:44:51 +02:00
antisnatchor
c84e1b88ac
Autorun Rule Engine from @antisnatchor with love (alpha version).
2015-07-27 10:34:58 +02:00
antisnatchor
7cb94386fe
Merge branch 'dns-rebinding'
...
Merging pull request #1105 , including some bug fix.
2015-07-19 11:28:47 +02:00
antisnatchor
51cc5963fa
Replaced system with IO.popen to prevent an unlikely RCE, and also added additional checks.
2015-07-19 11:24:53 +02:00
Brendan Coles
aaefde9b43
Replace console.log with beef.debug
2015-07-12 22:51:06 +00:00
Christian Frichot
13593990e5
WebRTC extension FF fix
...
Thanks to updates in modern FFs handling of WebRTC
the webrtcadapter wrapper had to be updated.
To ensure this would be picked up, also added
WebRTC REST integration test cases.
The tests only run if the extension is enabled,
which is still OFF by default.
See Issue #1134 and #1083
2015-07-08 15:13:21 +08:00
antisnatchor
61af18858e
Removed Silverlight detection from default hook. Use DetectSilverlight module instead. This fixes a UI alert to the user if the plugin is outdated.
2015-07-05 16:12:15 +02:00
antisnatchor
ea9549adbe
Fixed issue with latest Rack. Now using mime/types to return the right content-type based on file extension when using AssetHandler.bind.
2015-07-05 12:44:00 +02:00
antisnatchor
f891d963d7
2nd Bypass for Vegan anti-BeEF Chrome extension (v. 1.2)
2015-07-01 12:30:47 +02:00
Brendan Coles
06bbfe9c3b
Add BeEF::Filters.is_valid_port
2015-06-29 19:31:35 +00:00
antisnatchor
c387778959
Merge branch 'master' of https://github.com/beefproject/beef
2015-06-29 18:15:43 +02:00
antisnatchor
d9012d0f15
Check for ; and = characters when setting cookies
2015-06-29 12:00:03 +02:00
Brendan Coles
0d3c123e26
Use NetworkService.add and NetworkHost.add
2015-06-28 17:30:14 +00:00
antisnatchor
de13116182
fixed indentdation
2015-06-26 12:15:47 +02:00
antisnatchor
5de857f710
Merge branch 'master' of https://github.com/beefproject/beef
2015-06-26 12:08:53 +02:00
antisnatchor
4413cde187
Bypass for the 'Vegan' anti-BeEF Chrome extension.
2015-06-26 12:05:13 +02:00
Christian Frichot
ba990e2869
beef.net.request JS method now fires callbacks ALWAYS - not just on successful requests. Fixes Issue #1127
2015-06-23 16:21:58 +08:00
Christian Frichot
f51571d8b3
Updated base core filter to handle undefined/illegal/invalid UTF8 byte sequences. See Issue #1126
2015-06-23 09:13:30 +08:00
Brendan Coles
e17a48fae2
rescue TypeError, ArgumentError
2015-06-22 09:35:31 +00:00
Brendan Coles
3bec9b2702
Add support for Firefox 39
2015-06-22 06:14:33 +00:00
antisnatchor
e5407af2a0
Added support for Chrome 43. Added window.fetch detection for better fingerprinting of C42/43.
2015-06-11 09:59:23 +02:00
antisnatchor
03ecd61781
Limited /api/server/bind scope to the social_engineering/droppers directory (it could potentially be abused to mount arbitrary files post-auth)
2015-06-09 12:41:50 +02:00
antisnatchor
518fb5d874
Fixed bug in binding local files.
2015-06-09 12:20:20 +02:00
Brendan Coles
4746829153
Show UI URLs only when Admin UI is enabled
2015-05-17 22:10:09 +00:00
Brendan Coles
d0c48ce026
Add support for Chrome 42
2015-05-17 22:06:59 +00:00
Brendan Coles
e21c8286c5
Add support for Firefox 38
2015-05-17 21:56:16 +00:00
radoen
4db4354c24
Fixed JSON parsing error to prevent DoS
2015-05-04 09:42:09 +02:00
Brendan Coles
0657a3f1f9
Add support for Firefox 37
2015-04-06 04:37:06 +00:00
timcess
eaa1400f75
Add DNS Rebinding module and extension
2015-04-03 01:04:35 +06:00
Brendan Coles
791c9d1461
Add support for Chrome 41
2015-03-27 02:12:11 +00:00
antisnatchor
32434075f8
Removed loading of deleted file.rb after Rack update.
2015-03-25 10:54:37 +01:00
antisnatchor
6fcca972c8
Removed patched Rack::File after upgrading to Rack 1.6.0.
2015-03-25 10:52:47 +01:00
antisnatchor
4126a5530e
Fixed bug in forge_request that was not adding the POST body to forged requests.
2015-03-21 12:20:07 +01:00
