# # Copyright (c) 2006-2020 Wade Alcorn - wade@bindshell.net # Browser Exploitation Framework (BeEF) - http://beefproject.com # See the file 'doc/COPYING' for copying permission # class Get_http_servers < BeEF::Core::Command def self.options return [ {'name' => 'rhosts', 'ui_label' => 'Remote IP(s)', 'value' => 'common'}, {'name' => 'ports', 'ui_label' => 'Ports', 'value' => '80,8080'}, {'name' => 'threads', 'ui_label' => 'Workers', 'value' => '3'}, {'name' => 'wait', 'ui_label' => 'Wait (s) between each request for each worker', 'value' => '5'}, {'name' => 'timeout', 'ui_label' => 'Timeout for each request (s)', 'value' => '10'} ] end def post_execute content = {} content['url'] = @datastore['url'] if not @datastore['url'].nil? if content.empty? content['fail'] = 'No HTTP servers were discovered.' end save content configuration = BeEF::Core::Configuration.instance if configuration.get("beef.extension.network.enable") == true if @datastore['results'] =~ /^proto=(.+)&ip=(.+)&port=([\d]+)&url=(.+)/ proto = $1 ip = $2 port = $3 url = $4 session_id = @datastore['beefhook'] if !ip.nil? && BeEF::Filters.is_valid_ip?(ip) print_debug("Hooked browser found HTTP Server [proto: #{proto}, ip: #{ip}, port: #{port}]") BeEF::Core::Models::NetworkService.create(:hooked_browser_id => session_id, :proto => proto, :ip => ip, :port => port, :type => "HTTP Server") end end end end end