# # Copyright (c) 2006-2015 Wade Alcorn - wade@bindshell.net # Browser Exploitation Framework (BeEF) - http://beefproject.com # See the file 'doc/COPYING' for copying permission # class Detect_cups < BeEF::Core::Command def self.options return [ {'name' => 'ipHost', 'ui_label' => 'IP or Hostname', 'value' => '127.0.0.1'}, {'name' => 'port' , 'ui_label' => 'Port', 'value' => '631'} ] end def post_execute save({'CUPS' => @datastore['cups']}) configuration = BeEF::Core::Configuration.instance if configuration.get("beef.extension.network.enable") == true if @datastore['results'] =~ /^proto=(https?)&ip=([\d\.]+)&port=([\d]+)&cups=Installed$/ proto = $1 ip = $2 port = $3 session_id = @datastore['beefhook'] cid = @datastore['cid'].to_i if BeEF::Filters.is_valid_ip?(ip) print_debug("Hooked browser found 'CUPS' [proto: #{proto}, ip: #{ip}, port: #{port}]") r = BeEF::Core::Models::NetworkService.new(:hooked_browser_id => session_id, :proto => proto, :ip => ip, :port => port, :type => 'CUPS', :cid => cid) r.save end end end end end