mgeeky
|
e14b5f953a
|
Modified the Man-In-The-Browser logic of building query string in form fetching. Previous implementation couldn't handle properly option and submit parameters, therefore a MITB-ed user wasn't sending correct query string which should include those two more fields. For instance, bWAPP application (by IT SEC Games) makes choosing a bug to exploit by submitting form consisting of an option and <button> with type=submit. With this patch an user behind MITB will be able to successfully fetch the form and thus proceed to the next bug.
|
2016-03-07 18:01:37 +01:00 |
|
antisnatchor
|
815eff8d4e
|
Merge pull request #1220 from ilatypov/master
Delay form submission to allow the Javascript event loop complete the…
|
2016-02-18 15:51:00 +01:00 |
|
antisnatchor
|
39ca52ae8b
|
Merge pull request #1221 from Und3rf10w/patch-1216
Update loader.rb to include optparse
|
2016-02-18 15:49:44 +01:00 |
|
Jonathan Echavarria
|
f1eb8c8723
|
Update loader.rb
Includes fixes for #1216 by loading the 'optparse' library
|
2016-02-17 09:29:11 -05:00 |
|
Ilguiz Latypov
|
d81db24912
|
Delay form submission to allow the Javascript event loop complete the transfer of the log. #1215
|
2016-02-15 16:02:06 -05:00 |
|
Brendan Coles
|
b8afb0e855
|
Add WS timer to banner
|
2016-02-13 10:00:47 +00:00 |
|
Brendan Coles
|
d110675c0f
|
Revert 96dfde519a
|
2016-02-13 09:53:23 +00:00 |
|
Brendan Coles
|
7a668abc0a
|
Update ARE to support Evasion extension - Fix #1219
|
2016-02-13 07:09:00 +00:00 |
|
Brendan Coles
|
60f046c775
|
Update jquery version in evasion exclude_core_js
|
2016-02-13 06:49:54 +00:00 |
|
Brendan Coles
|
d0ca66cbf5
|
Decrease workers and increase timeout
|
2016-02-12 14:38:42 +00:00 |
|
Brendan Coles
|
13fded460e
|
assert_equal <expected>,<actual>
|
2016-02-12 13:59:50 +00:00 |
|
Brendan Coles
|
96dfde519a
|
Remove JSON.stringify(results) from beef.websocket.send - Fix #1210
|
2016-02-12 13:25:39 +00:00 |
|
Brendan Coles
|
d1d7371ccf
|
Disable console extension
|
2016-02-12 13:10:23 +00:00 |
|
Brendan Coles
|
ca288fef9f
|
Update gems
|
2016-02-12 11:23:29 +00:00 |
|
Brendan Coles
|
1a16837182
|
Remove win32console gem dependency for Windows
|
2016-02-12 11:03:29 +00:00 |
|
Brendan Coles
|
afd48d8a5f
|
Advise console extension is unavailable
|
2016-02-12 08:32:00 +00:00 |
|
Brendan Coles
|
8e5991784f
|
Add ARE return status
|
2016-02-11 12:37:48 +00:00 |
|
Brendan Coles
|
bef0c6dcdd
|
Add support for Windows 10
|
2016-02-10 07:40:28 +00:00 |
|
Brendan Coles
|
85d87f47b5
|
Remove HTTP method from beef.dom.persistentIframe - Fix #1211
|
2016-02-09 14:05:35 +00:00 |
|
Brendan Coles
|
8697c81ffa
|
Replace eval with hard-coded strings
|
2016-02-08 08:29:52 +00:00 |
|
Brendan Coles
|
fa8464bdd9
|
Update supported browsers
|
2016-02-08 03:59:25 +00:00 |
|
Brendan Coles
|
5065a55238
|
Add lan_http_scan ARE rule
|
2016-02-07 13:19:35 +00:00 |
|
Brendan Coles
|
bb8fe9d8f8
|
Fix icon
|
2016-02-07 12:20:53 +00:00 |
|
Brendan Coles
|
7e6e3bc51d
|
Add lan_flash_scan ARE rule
|
2016-02-07 12:20:04 +00:00 |
|
Brendan Coles
|
848dc65c6f
|
Add cross_origin_scanner_flash module
|
2016-02-07 11:20:55 +00:00 |
|
Brendan Coles
|
321aff56f3
|
Rename cross_origin_scanner to cross_origin_scanner_cors
|
2016-02-07 10:53:32 +00:00 |
|
Brendan Coles
|
eb9e0a0a68
|
Add ARE return status
|
2016-02-07 01:01:02 +00:00 |
|
Brendan Coles
|
83e1f596de
|
unless
|
2016-02-06 08:04:29 +00:00 |
|
Brendan Coles
|
dde8034606
|
Use 'Unknown' if BrowserPlatform is null
|
2016-02-05 04:25:23 +00:00 |
|
Brendan Coles
|
1715113ffa
|
Update Ruby version requirement to 2.0
|
2016-02-04 09:39:59 +00:00 |
|
Brendan Coles
|
6e157e163f
|
Update therubyracer link
|
2016-02-04 09:34:12 +00:00 |
|
Brendan Coles
|
ac1b51bbb2
|
Use groups in Gemfile
|
2016-02-04 09:32:55 +00:00 |
|
Brendan Coles
|
989d6de65a
|
Check ENV['LANG'] for UTF-8 compatibility
|
2016-02-04 07:51:45 +00:00 |
|
Brendan Coles
|
9e0ccf71bb
|
Change /api/modules/multi_browser to accept 'ALL_ONLINE' for 'hb_ids'
|
2016-02-04 00:49:29 +00:00 |
|
Brendan Coles
|
8e3264e750
|
Change names
|
2016-02-03 22:57:33 +00:00 |
|
Brendan Coles
|
f4ff606cbf
|
Change /api/modules/multi_browser to accept 'ALL' for 'hb_ids'
|
2016-02-02 21:50:08 +00:00 |
|
Brendan Coles
|
efe8961dfa
|
Fix file path - Fix #1204
|
2016-02-02 01:40:26 +00:00 |
|
Brendan Coles
|
5507447661
|
Hide ARE rule processing output unless debugging
|
2016-02-01 18:42:21 +00:00 |
|
Brendan Coles
|
efb99f9e98
|
Add command module ID to module response log message
|
2016-02-01 14:18:24 +00:00 |
|
Brendan Coles
|
39df7184aa
|
Add Clear Console module
|
2016-01-31 20:29:45 +00:00 |
|
Brendan Coles
|
ff50dc9c4a
|
Add lan_fingerprint ARE rule
|
2016-01-31 20:27:44 +00:00 |
|
Brendan Coles
|
623db6229e
|
Add lan_cors_scan ARE rule
|
2016-01-31 20:27:14 +00:00 |
|
Brendan Coles
|
e462e504fb
|
Add support for ARE rules with multiple browsers
|
2016-01-31 20:26:35 +00:00 |
|
Brendan Coles
|
fefcef6fb0
|
Update support for Chrome
|
2016-01-31 20:09:45 +00:00 |
|
Brendan Coles
|
14531f782a
|
Remove OS requirement
|
2016-01-30 17:34:20 +00:00 |
|
Brendan Coles
|
798e79b55f
|
Add Midori logo
|
2016-01-30 15:03:00 +00:00 |
|
Brendan Coles
|
85106b98de
|
Add Odyssey logo
|
2016-01-30 14:14:05 +00:00 |
|
Brendan Coles
|
9e7f36c113
|
Re-indent
|
2016-01-30 13:56:22 +00:00 |
|
Brendan Coles
|
e947acc69b
|
Add AROS logo
|
2016-01-30 13:54:24 +00:00 |
|
Brendan Coles
|
41b5b8fd06
|
Use Ruby 2.1.5
|
2016-01-29 16:50:01 +00:00 |
|