22941a51b4
Only "open" and "closed" are supported currently Part of issue 286 git-svn-id: https://beef.googlecode.com/svn/trunk@1177 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
95 lines
3.6 KiB
Ruby
95 lines
3.6 KiB
Ruby
#
|
|
# Copyright 2011 Wade Alcorn wade@bindshell.net
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
module BeEF
|
|
module Extension
|
|
module Requester
|
|
|
|
#
|
|
# The http handler that manages the Requester.
|
|
#
|
|
class Handler < WEBrick::HTTPServlet::AbstractServlet
|
|
attr_reader :guard
|
|
|
|
H = BeEF::Core::Models::Http
|
|
Z = BeEF::Core::Models::HookedBrowser
|
|
|
|
#
|
|
# Class constructor
|
|
#
|
|
def initialize(data)
|
|
# we set up a mutex
|
|
@guard = Mutex.new
|
|
@data = data
|
|
setup()
|
|
end
|
|
|
|
def setup()
|
|
|
|
# validates the hook token
|
|
beef_hook = @data['beefhook'] || nil
|
|
raise WEBrick::HTTPStatus::BadRequest, "beefhook is null" if beef_hook.nil?
|
|
|
|
# validates the request id
|
|
request_id = @data['cid'] || nil
|
|
raise WEBrick::HTTPStatus::BadRequest, "Original request id (command id) is null" if request_id.nil?
|
|
|
|
# validates that a hooked browser with the beef_hook token exists in the db
|
|
zombie_db = Z.first(:session => beef_hook) || nil
|
|
raise WEBrick::HTTPStatus::BadRequest, "Invalid beefhook id: the hooked browser cannot be found in the database" if zombie_db.nil?
|
|
|
|
# validates that we have such a http request saved in the db
|
|
http_db = H.first(:id => request_id.to_i, :hooked_browser_id => zombie_db.id) || nil
|
|
#print_debug("[REQUESTER] BeEF::Extension::Requester::Handler -> Searching for request id [#{request_id.to_i}] of zombie id [#{zombie_db.id}]")
|
|
raise WEBrick::HTTPStatus::BadRequest, "Invalid http_db: no such request found in the database" if http_db.nil?
|
|
|
|
# validates that the http request has not be ran before
|
|
raise WEBrick::HTTPStatus::BadRequest, "This http request has been saved before" if http_db.has_ran.eql? true
|
|
|
|
# validates the response code
|
|
response_code = @data['results']['response_status_code'] || nil
|
|
raise WEBrick::HTTPStatus::BadRequest, "Http response code is null" if response_code.nil?
|
|
#print_debug("[PROXY] Saving response with response code [#{@data['results']['response_status_code']}] - response body [#{@data['results']['response_data']}]")
|
|
|
|
# save the results in the database
|
|
http_db.response_headers = @data['results']['response_headers']
|
|
http_db.response_status_code = @data['results']['response_status_code']
|
|
http_db.response_status_text = @data['results']['response_status_text']
|
|
http_db.response_port_status = @data['results']['response_port_status']
|
|
http_db.response_data = @data['results']['response_data']
|
|
http_db.response_date = Time.now
|
|
http_db.has_ran = true
|
|
|
|
# temporary hack to prevent MySQL errors when saving images
|
|
# see issue http://code.google.com/p/beef/issues/detail?id=368
|
|
if BeEF::Core::Configuration.instance.get("beef.database.default") == "mysql"
|
|
if http_db.response_headers.to_s =~ /Content-Type: image/
|
|
print_debug("Found [Content-Type: image] in the http response headers: saving dummy data instead of original raw image data")
|
|
http_db.response_data = "IMAGE CONTENT"
|
|
end
|
|
end
|
|
|
|
|
|
http_db.save
|
|
end
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
end
|
|
end
|