beef/core/main/handlers/modules/beefjs.rb

#
#   Copyright 2012 Wade Alcorn wade@bindshell.net
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#       http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.
#
module BeEF
module Core
module Handlers
module Modules

  # @note Purpose: avoid rewriting several times the same code.
  module BeEFJS

    # Builds the default beefjs library (all default components of the library).
    # @param [Object] req_host The request object
    def build_beefjs!(req_host)
      config = BeEF::Core::Configuration.instance
      # @note set up values required to construct beefjs
      beefjs = ''
      # @note location of sub files
      beefjs_path = "#{$root_dir}/core/main/client/"
      # @note we load websocket library only if ws server is enabled in config.yalm
      # check in init.js
      if config.get("beef.http.websocket.enable")
        js_sub_files = %w(lib/jquery-1.5.2.min.js lib/evercookie.js lib/json2.js beef.js browser.js browser/cookie.js browser/popup.js session.js os.js dom.js logger.js net.js updater.js encode/base64.js encode/json.js net/local.js init.js mitb.js net/dns.js websocket.js)
      else
        js_sub_files = %w(lib/jquery-1.5.2.min.js lib/evercookie.js lib/json2.js beef.js browser.js browser/cookie.js browser/popup.js session.js os.js dom.js logger.js net.js updater.js encode/base64.js encode/json.js net/local.js init.js mitb.js net/dns.js)
      end

      # @note construct the beefjs string from file(s)
      js_sub_files.each {|js_sub_file_name|
        js_sub_file_abs_path = beefjs_path + js_sub_file_name
        beefjs << (File.read(js_sub_file_abs_path) + "\n\n")
      }

      # @note create the config for the hooked browser session

      hook_session_name = config.get('beef.http.hook_session_name')
      hook_session_config = BeEF::Core::Server.instance.to_h

      # @note if http_host="0.0.0.0" in config ini, use the host requested by client
      if hook_session_config['beef_host'].eql? "0.0.0.0"
        hook_session_config['beef_host'] = req_host
        hook_session_config['beef_url'].sub!(/0\.0\.0\.0/, req_host)
      end

      # @note if http_port <> public_port in config ini, use the public_port
      unless hook_session_config['beef_public_port'].nil?
        if hook_session_config['beef_port'] != hook_session_config['beef_public_port']
          hook_session_config['beef_port'] = hook_session_config['beef_public_port']
          hook_session_config['beef_url'].sub!(/#{hook_session_config['beef_port']}/, hook_session_config['beef_public_port'])
          if hook_session_config['beef_public_port'] == '443'
            hook_session_config['beef_url'].sub!(/http:/, 'https:')
          end
        end
      end

      if config.get("beef.http.websocket.enable")
        hook_session_config['websocket_secure'] = config.get("beef.http.websocket.secure")
        hook_session_config['websocket_port'] = config.get("beef.http.websocket.port")
        hook_session_config['websocket_timer'] = config.get("beef.http.websocket.alive_timer")
      end
      
      # @note populate place holders in the beefjs string and set the response body
      eruby = Erubis::FastEruby.new(beefjs)
      @body << eruby.evaluate(hook_session_config)

    end

    # Finds the path to js components
    # @param [String] component Name of component
    # @return [String|Boolean] Returns false if path was not found, otherwise returns component path
    def find_beefjs_component_path(component)
      component_path = component
      component_path.gsub!(/beef./, '')
      component_path.gsub!(/\./, '/')
      component_path.replace "#{$root_dir}/core/main/client/#{component_path}.js"

      return false if not File.exists? component_path

      component_path
    end

    # Builds missing beefjs components.
    # @param [Array] beefjs_components An array of component names
    def build_missing_beefjs_components(beefjs_components)
      # @note verifies that @beef_js_cmps is not nil to avoid bugs
      @beef_js_cmps = '' if @beef_js_cmps.nil?

      if beefjs_components.is_a? String
        beefjs_components_path = find_beefjs_component_path(beefjs_components)
        raise "Invalid component: could not build the beefjs file" if not beefjs_components_path
        beefjs_components = {beefjs_components => beefjs_components_path}
      end

      beefjs_components.keys.each {|k|
        next if @beef_js_cmps.include? beefjs_components[k]

        # @note path to the component
        component_path = beefjs_components[k]

        # @note we output the component to the hooked browser
        @body << File.read(component_path)+"\n\n"

        # @note finally we add the component to the list of components already generated so it does not get generated numerous times.
        if @beef_js_cmps.eql? ''
          @beef_js_cmps = component_path
        else
          @beef_js_cmps += ",#{component_path}"
        end
      }
    end

  end

end
end
end
end