ae3c154518
git-svn-id: https://beef.googlecode.com/svn/trunk@1341 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
62 lines
5.5 KiB
JavaScript
62 lines
5.5 KiB
JavaScript
//
|
|
// Copyright 2011 Wade Alcorn wade@bindshell.net
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//
|
|
WelcomeTab = function() {
|
|
|
|
welcome = " \
|
|
<div style='font:11px tahoma,arial,helvetica,sans-serif;width:500px' > \
|
|
<p><img src='/ui/media/images/beef.jpg' alt='BeEF - The Browser Exploitation Framework' /></p><br /> \
|
|
<p>Official website: <a href='http://beefproject.com/'>http://beefproject.com/</a></p><br />\
|
|
<p><span style='font:bold 13px tahoma,arial,helvetica,sans-serif'>Getting Started</span></p><br />\
|
|
<p>Welcome to BeEF!</p><br /> \
|
|
<p>Before being able to fully explore the framework you will have to 'hook' a browser. To begin with you can point a browser towards the basic demo page <a href='/demos/basic.html' target='_blank'>here</a>, or the advanced version <a href='/demos/butcher/index.html' target='_blank'>here</a>.</p><br /> \
|
|
<p>After a browser is hooked into the framework they will appear in the 'Hooked Browsers' panel on the left. Hooked browsers will appear in either an online or offline state, depending on how recently they have polled the framework. To interact with a hooked browser simply left-click it, a new tab will appear. You can also right-click it to open a context-menu with additional functionality, like Proxy and XssRays.</p><br /> \
|
|
<p><span style='font:bold 13px tahoma,arial,helvetica,sans-serif'>Hooked Browsers</span></p><br />\
|
|
<p>Each hooked browser tab has a number of sub-tabs, described below:</p><br /> \
|
|
<ul style=\"margin-left:15px;\"><li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Main:</span> Display information about the hooked browser after you've run some command modules.</li> \
|
|
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Logs:</span> Displays recent log entries related to this particular hooked browser.</li> \
|
|
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Commands:</span> This tab is where modules can be executed against the hooked browser. This is where most of the BeEF functionality resides. \
|
|
Most command modules consist of Javascript code that is executed against the selected\
|
|
Hooked Browser. Command modules are able to perform any actions that can be achieved\
|
|
through Javascript: for example they may gather information about the Hooked Browser, manipulate the DOM or perform other activities such as exploiting vulnerabilities within the local network of the Hooked Browser.<br /><br />\
|
|
Each command module has a traffic light icon, which is used to indicate the following:<ul>\
|
|
<li><img alt='' src='media/images/icons/green.png' unselectable='on'> - The command works against the target and should be invisible to the user</li>\
|
|
<li><img alt='' src='media/images/icons/orange.png' unselectable='on'> - The command works against the target, but may be visible to the user</li>\
|
|
<li><img alt='' src='media/images/icons/grey.png' unselectable='on'> - It is unknown if this command works against this target</li>\
|
|
<li><img alt='' src='media/images/icons/red.png' unselectable='on'> - Command does not work against this target</li></ul><br />\
|
|
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>XssRays:</span> The XssRays tab allows you to check if links, forms and URI path of the page where the browser is hooked are vulnerable to XSS.</li> \
|
|
<li><span style='font:bold 11px tahoma,arial,helvetica,sans-serif'>Requester:</span> The Requester tab allows you to submit arbitrary HTTP requests on behalf of the hooked browser.\
|
|
The proxy allows you to use a browser as a proxy. Simply right-click a browser from the Hooked Browsers tree to the left and select \"Use as Proxy\".<br />\
|
|
Each request sent by the Requester or Proxy is recorded in the History panel. Click a history item for the HTTP headers and HTML source of the request.</li></ul><br /><br />\
|
|
<p><span style='font:bold 13px tahoma,arial,helvetica,sans-serif'>Learn More</span></p><br />\
|
|
<p>To learn more about how BeEF works please review the wiki:</p><br />\
|
|
<ul style=\"margin-left:15px;\">\
|
|
<li>Architecture of the BeEF System: <a href=\"https://code.google.com/p/beef/wiki/Architecture\">https://code.google.com/p/beef/wiki/Architecture</a></li>\
|
|
<li>Writing your own modules: <a href='https://code.google.com/p/beef/wiki/CommandModuleAPI'>https://code.google.com/p/beef/wiki/CommandModuleAPI</a></li>\
|
|
<li>Requester and Proxy: <a href=\"https://code.google.com/p/beef/wiki/TunnelingProxy\">https://code.google.com/p/beef/wiki/TunnelingProxy</a></li></ul>\
|
|
</div>\
|
|
";
|
|
|
|
WelcomeTab.superclass.constructor.call(this, {
|
|
region:'center',
|
|
padding:'10 10 10 10',
|
|
html: welcome,
|
|
autoScroll: true,
|
|
border: false
|
|
});
|
|
};
|
|
|
|
Ext.extend(WelcomeTab,Ext.Panel, {});
|