Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,049 Commits 14 Branches 34 Tags
e168a059367068bf0ec2494009c8db08dfd65e36
Commit Graph

105 Commits

Author SHA1 Message Date
bcoles
2bca21a41d Minor updates to XSSRays 
Part of issue #47
 2012-03-26 16:29:15 +10:30
bcoles
45475d625b Updated IE version detection 
No longer modifies the DOM for every call to:
	`isIE8()`
	`isIE9()`
	`isIE()`
 2012-03-22 19:27:36 +10:30
bcoles
5329d5c147 Added support for Firefox 11 2012-03-16 13:11:20 +10:30
bcoles
e52779e72e Fixed javaEnabled() in BeEF hook 
- It was breaking the hook in IE6

Also fixed a couple of typos in the Local File Theft module description
 2012-03-16 12:40:13 +10:30
Graziano Felline
b02bdbaaa7 ISSUE 625 - corrected the bug. Added li's elements poison 2012-03-14 15:41:10 +01:00
Graziano Felline
8795c5770a ISSUE 625 - corrected the bug. Added li's elements poison 2012-03-14 15:34:46 +01:00
bcoles
6ef889b0b1 Removed Java from hook initialization: 
- Removed has_java
	- Removed internal_ip
	- Removed internal_hostname

Added function `beef.browser.javaEnabled()`

Patched function `beef.browser.hasJava()`
	- should no longer break the hook in Chrome/Safari

Added `not_working` browsers to History Extraction module
 2012-03-13 00:19:01 +10:30
bcoles
9735a7b66f Merge branch 'master' of https://github.com/beefproject/beef 2012-03-12 11:41:08 +10:30
radoen
a0c11fa695 Added support to intercept dynamic requests 2012-03-11 10:26:56 +01:00
unknown
dbd6baa7b0 Temporary fix to prevent hook error on Safari. I will implement a final fix tomorrow. 2012-03-07 16:19:06 +01:00
antisnatchor
8c3afcf2b9 Minor changes related to Java detection with the unsigned applet: if the browser is Chrome, we simply rely on window.navigator. 2012-03-06 19:56:58 +01:00
Keith Lee
cc9756cf59 Fix for issues 567 and also remove multiple calls to beef.browser.hasJava() from /beef/core/main/client/net/local.js 2012-03-07 01:46:51 +08:00
Keith Lee
97672966df Fix for issues 567 and also remove multiple calls to beef.browser.hasJava() from /beef/core/main/client/net/local.js 2012-03-07 01:41:27 +08:00
Mike Haworth
5e138395d4 Partial fix for issue #100, now detects build version of flash 2012-02-18 14:17:12 +13:00
antisnatchor
5bc6745e03 Fixed issue 66: base64'ed the iframe src in case of Chrome/Safari to bypass the webkit anti-XSS filter 2012-02-15 16:01:46 +01:00
antisnatchor
58f2b4f7a1 Added detection of Chrome 17 2012-02-15 16:01:45 +01:00
antisnatchor
1d74d7eeab Fixed a serious bug in beef.net.request when sending cross-domain POST data. jQuery is automatically changing the method to GET if the dataType (that was hardcoded in our code) is set to 'script'. 2012-02-15 16:00:38 +01:00
bcoles
a6986e3960 Added detection for Chrome 16, updated Chrome Extensions modules and 
split the Details tab "Browser Hook Initialization" into "Hooked Page",
"Browser" and "Host"
 2012-01-04 18:52:34 +10:30
Wade Alcorn
06899ca267 Year updated from 2011 to 2012 2011-12-31 22:24:36 +10:00
bcoles
2439c9d61c Added Page URI to browser hook initialization details 
Fixes issue 543
 2011-12-28 08:47:07 +10:30
bcoles
33289bc023 Fixed bug in cross-domain request detection 
Same-domain requests on a non-standard HTTP port were incorrectly
identified as cross-domain requests
 2011-12-27 17:56:18 +10:30
bcoles
74ec478449 Added allow_cross_domain to the request object 
By default all requests use allow_cross_domain = "true"

The Proxy component uses allow_cross_domain = "false"

The Forge Request component uses allow_cross_domain = "true"

Fixes issue 87
 2011-12-25 17:37:32 +10:30
bcoles
4543d60570 Added allowCrossDomain functionality to beef.net.requester.send 2011-12-24 13:37:14 +10:30
bcoles
61a34c1c60 Decoupled beef.net.request and beef.net.proxyrequest 
This is part of issue 87
 2011-12-24 04:21:45 +10:30
bcoles
f2d4592941 Added DNS Tunnel first draft 2011-12-23 08:24:10 +10:30
bcoles
6ff92f48e0 Added document.referrer to browser hook initialization and tidied some code 2011-12-22 02:43:12 +10:30
bcoles
2e9ad8b9dc More tidying of requester and proxy in preperation for unit tests 2011-12-21 06:09:30 +10:30
bcoles
3ee52b82c0 Part of issue 87, issue 63, issue 29, issue 30 
In preperation for creating requester and proxy unit tests:

  o Tidied up some of the requester and proxy
  o Partially de-coupled requester from proxy
  o Fixed minor bugs:
    o is_valid_uri was not implemented correctly
    o http scheme validation had "http" instead of "https"
 2011-12-20 02:47:50 +10:30
bcoles
ec7d3134aa Updated browser detection in hook initialization 
Future proofed browser version detection in preperation for double
digit major version numbers

Updated flash detection in Internet Explorer for Flash 11.x
 2011-12-12 00:17:15 +10:30
bcoles
a49d1351e7 Added check for document.documentMode so Internet Explorer 8 and 9 are 
no longer detected as Internet Explorer 7 when operating in compatibility mode.

Fixes issue 589
 2011-12-08 22:34:46 +10:30
antisnatchor
c37db1e364 (Fixes issue 486): now using the requester (so also the tunneling proxy) you can correctly send POST requests 2011-11-23 17:07:55 +01:00
antisnatchor
4174e9cd5e fixed lame JS error in net.js 2011-11-22 16:15:20 +01:00
antisnatchor
0866b0a8e1 bugfix on the requester, small code change in net.js (optimized cross_domain checks, added check when URI contains schema/domain as well) 2011-11-22 11:18:55 +01:00
Wade
82865f6ffa popup blocker detection added 2011-11-21 17:15:39 +10:00
antisnatchor
2997540918 rewrote the server core and adjusted the API/classes to use Thin and Rack instead of WebRick. 2011-11-19 15:49:19 +01:00
bcoles@gmail.com
f7a39098d4 Updated Firefox detection: 
Updated Firefox version detection
	(in preperation for double digit version numbers)

	Added Firefox 9 detection  (the beta is public)

	Added Firefox 10 detection (the beta will be public in ~30 days)



git-svn-id: https://beef.googlecode.com/svn/trunk@1429 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-11-12 02:03:36 +00:00
antisnatchor
a930d11792 Improved Javascript documentation (Rdoc) for dom.js 
git-svn-id: https://beef.googlecode.com/svn/trunk@1390 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-11-02 15:14:00 +00:00
antisnatchor
8a3977ff78 Improved attachApplet JS API function to support codebase attribute 
git-svn-id: https://beef.googlecode.com/svn/trunk@1388 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-11-02 11:04:05 +00:00
antisnatchor
8074443730 Improved attachApplet JS API function to parse array of parameters. Now also use the best way to attach the applet cross-browser. 
git-svn-id: https://beef.googlecode.com/svn/trunk@1386 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-11-01 12:00:46 +00:00
bcoles@gmail.com
5ea6dd9fd2 Added Firefox 8 detection 
In preperation for Firefox 8 (the beta is public)



git-svn-id: https://beef.googlecode.com/svn/trunk@1385 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-30 12:07:17 +00:00
antisnatchor
5f59e198d1 Added Chrome 15 detection 
git-svn-id: https://beef.googlecode.com/svn/trunk@1384 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-29 14:52:59 +00:00
avlidienbrunn@gmail.com
f3cd6aaeb5 (Fixes issue 450) Ported MITB code from h.ackack.net! 
git-svn-id: https://beef.googlecode.com/svn/trunk@1371 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-19 08:06:36 +00:00
bcoles@gmail.com
dd5b1f5a81 Added platform and ActiveX detection to the browser hook initialization 
o Platform often provides the architecture (ie, 32bit) and can 
	be useful in identifying devices / smart phones

	o ActiveX detection was added for obscure browsers (ie, such as 
	software using an embedded browsing engine built on the IE COM)
	Normally ActiveX would only be detected on a hooked IE browser.

Moved the `is_valid_yes_no' filter from browser.rb to base.rb



git-svn-id: https://beef.googlecode.com/svn/trunk@1368 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-16 20:56:23 +00:00
bcoles@gmail.com
d0f332643e Separated hostname and hostport 
git-svn-id: https://beef.googlecode.com/svn/trunk@1366 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-16 14:25:47 +00:00
buherator@gmail.com
ed866886f7 Storing port of HookedBrowser, fixing value of HookedBrowser.domain 
git-svn-id: https://beef.googlecode.com/svn/trunk@1365 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-15 22:04:08 +00:00
antisnatchor
e22332e1f8 (Fixes issue 467) rewrote from scratch the XssRays handler, refactored JS and Ruby code, improved the whole thing. 
git-svn-id: https://beef.googlecode.com/svn/trunk@1361 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-10-12 14:56:50 +00:00
bcoles@gmail.com
f7bca3c192 Added Rewrite HREFs (HTTPS) module 
This module will rewrite all the href attributes of HTTPS links to use 
HTTP instead of HTTPS. Links relative to the web root are not rewritten.

Added beef.dom.rewriteLinksProtocol(old_protocol, new_protocol, selector)



git-svn-id: https://beef.googlecode.com/svn/trunk@1317 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-09-29 09:55:09 +00:00
bcoles@gmail.com
87e5bca2fb Added match for Firefox 7 in preperation for impending release 
git-svn-id: https://beef.googlecode.com/svn/trunk@1313 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-09-28 06:48:27 +00:00
antisnatchor
75b425e5e6 Added detection for Chrome 14 
git-svn-id: https://beef.googlecode.com/svn/trunk@1299 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-09-21 08:29:05 +00:00
bcoles@gmail.com
9127bbeb88 Patched browser detection 
Revision 1285 broke browser hooking for Opera, Chrome and Safari.

This commit should fix this issue. Also:

Fixes issue 514
Fixes issue 503



git-svn-id: https://beef.googlecode.com/svn/trunk@1291 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
 2011-09-16 06:21:13 +00:00