antisnatchor
e1652bf52e
Added sinatra dependency to bundler Gemfile
2012-03-11 10:51:43 +01:00
radoen
a0c11fa695
Added support to intercept dynamic requests
2012-03-11 10:26:56 +01:00
Keith Lee
f2401d3f39
Issue 86 - Working for Firefox. Support for Chrome+Opera+IE still pending.
2012-03-11 10:26:56 +01:00
asaafan
76e881dce9
Delete Skype XSS stub from main branch
2012-03-11 10:26:56 +01:00
unknown
ea199f5c55
Adding stub for Skype XSS module
2012-03-11 10:26:56 +01:00
asaafan
05b7eab56c
Delete Skype XSS stub from main branch
2012-03-09 01:46:11 +02:00
bcoles
11870710e8
Added a couple of 0day CSRF exploits for Zenoss Core <= 3.2.1
2012-03-08 20:28:38 +01:00
Saafan
3bd06ebf82
Merge pull request #631 from asaafan/master
...
Testing Fork/Merge
2012-03-05 07:51:04 -08:00
Saafan
c1ad9d7b04
Testing fork/merge
2012-03-05 17:47:14 +02:00
Michele Orru
2796e384b3
Merge pull request #630 from milo2012/master
...
changes to command.rb and commands.rb so that that @datastore[cid'] , @datastore['results'] and @datastore['beefhook'] can be called from the modules
2012-03-05 01:37:19 -08:00
Keith Lee
95f7e92011
Changes to command module and get_physical location so that @datastore['cid'] , @datastore['results'] and @datastore['beefhook'] can be called from the modules
2012-03-05 03:40:46 +08:00
antisnatchor
698e01bb83
reverted back test_contants definition.
2012-03-04 16:36:08 +01:00
antisnatchor
08d50512e9
Added bootstrap unit tests.
2012-03-04 16:22:37 +01:00
antisnatchor
e9a6049e58
Fixes issue 621: Added 2 new command line options. Now it's psosible to specify a different config.yaml file. Also changed the core load order, adding a new bootstrap module.
2012-03-04 14:55:03 +01:00
Wade Alcorn
3f06f6db18
Commented yaml bug fix
2012-03-04 22:12:04 +10:00
Wade Alcorn
487227b945
Version updated
2012-03-04 22:11:21 +10:00
Wade Alcorn
6c7624805c
Update delay to test jenkins
2012-03-04 21:46:03 +10:00
bcoles
753299e758
Updated Get Page HTML module:
...
o Now returns head and body in one beef.send() request
o Now stores results correctly
2012-03-04 20:24:04 +10:30
bcoles
0485a1ab7e
Added 3x router CSRF exploits:
...
o Comtrend CT5367
o Comtrend CT5624
o D-Link DSL500T
2012-03-04 14:55:00 +10:30
Christian Frichot
52d06e40a2
Removed the dev/null output in the Rake Install task Issue #629
2012-03-03 22:44:05 +08:00
bcoles
5c678a2550
Added cleanup() function to router exploits
...
Removed `username:password@` portion of example target URLs as
unfortunately this triggers warnings in most modern browsers. The
modules target CSRF vulnerabilities and it's expected and
acceptable behaviour to rely on the user having an authorized session by
default.
"Advanced users" will be familiar with the `username:password@` trick
and can add it to the URL if they desire.
2012-03-03 20:43:56 +10:30
Christian Frichot
63805d943d
The Console Shell now allows you to drop into an IRB (and then play with the BeEF object if you want) Issue #627
2012-03-03 14:59:59 +08:00
Ben Waugh
302bb27212
Revert 041ed2b47a27655cad360397b6ca43401a027504^..HEAD
beef-0.4.3.2
2012-02-28 09:01:29 +10:00
Ben Waugh
041ed2b47a
Jenkins Test Change
2012-02-28 07:32:02 +10:00
Wade Alcorn
df0458d62e
Merge branch 'master' of github.com:beefproject/beef
2012-02-26 21:35:25 +10:00
Wade Alcorn
275bbfaad2
Updates to test jenkins
2012-02-26 21:35:03 +10:00
antisnatchor
e7dd04977e
Added getPhysicalLocation module written by @keith55. Adjusted config.yaml description and browser support.
2012-02-26 09:53:16 +01:00
bcoles
b6ce0cf611
Updated Detect Firebug module description
2012-02-22 20:10:38 +10:30
bcoles
fd7cee3c5c
Fixed typo in logger unit test
2012-02-22 19:07:07 +10:30
bcoles
b52c3d7d19
Added unit test stubs for proxy, requester and event logger extensions.
...
Fixes issue #29
Fixes issue #30
Fixes issue #33
Created a unit test stub for logger (as opposed to event_logger) to
differentiate between the main Logs tab and the event logs for each
zombie.
2012-02-22 19:00:48 +10:30
Wade Alcorn
ec48e2647f
Minor update to trigger test server
2012-02-21 06:08:15 +10:00
Wade Alcorn
5118429cb5
Overkill test for test server
2012-02-20 21:02:46 +10:00
Wade Alcorn
d010bd6d9e
Extend wait time between login tests
2012-02-20 17:46:12 +10:00
bcoles
cda1659356
Improved proxy error handling. Fixes issue #92 .
...
The proxy now dies somewhat gracefully when given a malformed request.
The `Content-Length' header is now only matched by the parser if its
value is an integer.
A request with a null or missing HTTP version in the header now defaults
to HTTP/1.0
A request with a null or missing `Host' header returns:
`ERROR: CrossDomain Request. The request was not sent.'
regardless of whether the host is specified in the URL.
2012-02-19 03:42:20 +10:30
bcoles
d50b07ac56
Added Unhook module. Fixes issue #525 .
2012-02-18 19:10:02 +10:30
bcoles
a9e276f50a
Added Detect Firebug module. Fixes issue 497
...
Moved Detect Software module from Browser to Host category
2012-02-18 17:43:20 +10:30
Christian Frichot
791b34863e
Renamed / tidied up some of the config. See Issue #82
2012-02-18 10:06:47 +08:00
Mike Haworth
fd15c108a2
Merge branch 'master' of github.com:beefproject/beef
2012-02-18 14:17:34 +13:00
Mike Haworth
5e138395d4
Partial fix for issue #100 , now detects build version of flash
2012-02-18 14:17:12 +13:00
Christian Frichot
15932efcb3
Made some minor adjustments to 'os' key rating in core/module.rb. See issue #72
2012-02-18 09:06:46 +08:00
Mike Haworth
106e2dbd2d
added detect software module
2012-02-18 12:22:17 +13:00
Wade Alcorn
56a9c4d04d
Changed version number
2012-02-16 20:30:48 +10:00
Wade Alcorn
55b80d3b6d
Merge branch 'master' of github.com:beefproject/beef
2012-02-16 08:23:39 +10:00
bcoles
8ecfa3578f
Merge branch 'master' of https://github.com/beefproject/beef
2012-02-16 02:52:38 +10:30
antisnatchor
2715e0400c
added browser type,version and OS to console output when a new browser is hooked in BeEF
2012-02-15 16:01:47 +01:00
Ben
667d00351d
Updated README instructions for MAC OS X
2012-02-15 16:01:46 +01:00
Ben
3ad2dbb3c7
Rake task to generate DMG image
2012-02-15 16:01:46 +01:00
antisnatchor
5bc6745e03
Fixed issue 66: base64'ed the iframe src in case of Chrome/Safari to bypass the webkit anti-XSS filter
2012-02-15 16:01:46 +01:00
antisnatchor
58f2b4f7a1
Added detection of Chrome 17
2012-02-15 16:01:45 +01:00
bcoles
e5aa0671a1
Removed "notes:" node from three module config.yaml files
2012-02-15 16:01:45 +01:00