c015529f19
Moved the content of the welcome windows to the Getting Started tab The formatting and wording needs to be improved This is part of issue 416 git-svn-id: https://beef.googlecode.com/svn/trunk@1339 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
321 lines
9.6 KiB
JavaScript
321 lines
9.6 KiB
JavaScript
//
|
|
// Copyright 2011 Wade Alcorn wade@bindshell.net
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//
|
|
/*
|
|
* The request Tab panel for the selected zombie.
|
|
* Loaded in /ui/panel/index.html
|
|
*/
|
|
ZombieTab_Requester = function(zombie) {
|
|
|
|
// The status bar.
|
|
var commands_statusbar = new Beef_StatusBar('requester-bbar-zombie-'+zombie.session);
|
|
|
|
|
|
/*
|
|
* The panel used to forge raw HTTP requests.
|
|
********************************************/
|
|
var requests_panel = new Ext.Panel({
|
|
id: 'requester-forge-requests-zombie-'+zombie.session,
|
|
title: 'Forge Request',
|
|
layout: 'fit'
|
|
});
|
|
|
|
/*
|
|
* The panel that displays the history of all requests performed.
|
|
********************************************/
|
|
var history_panel_store = new Ext.ux.data.PagingJsonStore({
|
|
storeId: 'requester-history-store-zombie-'+zombie.session,
|
|
url: '/ui/requester/history.json',
|
|
remoteSort: false,
|
|
autoDestroy: true,
|
|
autoLoad: false,
|
|
root: 'history',
|
|
|
|
fields: ['domain', 'port', 'method', 'request_date', 'response_date','id', 'has_ran', 'path','response_status_code', 'response_status_text', 'response_port_status'],
|
|
sortInfo: {field: 'request_date', direction: 'DESC'},
|
|
|
|
baseParams: {
|
|
nonce: Ext.get("nonce").dom.value,
|
|
zombie_session: zombie.session
|
|
}
|
|
});
|
|
|
|
var req_pagesize = 30;
|
|
|
|
var history_panel_bbar = new Ext.PagingToolbar({
|
|
pageSize: req_pagesize,
|
|
store: history_panel_store,
|
|
displayInfo: true,
|
|
displayMsg: 'Displaying history {0} - {1} of {2}',
|
|
emptyMsg: 'No history to display'
|
|
});
|
|
|
|
/*
|
|
* Uncomment it when we'll add a contextMenu (right click on a row) in the history grid
|
|
*/
|
|
// var history_panel_context_menu = new Ext.menu.Menu({
|
|
// items: [{
|
|
// id: 'do-something',
|
|
// text: 'Do something'
|
|
// }],
|
|
// listeners: {
|
|
// itemclick: function(item) {
|
|
// switch (item.id) {
|
|
// case 'do-something':
|
|
// console.log("history_panel_context_menu.rowIndex: " + history_panel_context_menu.rowIndex);
|
|
// console.log("history_panel_context_menu.dbIndex: " + history_panel_context_menu.dbIndex);
|
|
// break;
|
|
// }
|
|
// }
|
|
// }
|
|
// });
|
|
|
|
var history_panel_grid = new Ext.grid.GridPanel({
|
|
id: 'requester-history-grid-zombie-'+zombie.session,
|
|
store: history_panel_store,
|
|
bbar: history_panel_bbar,
|
|
border: false,
|
|
loadMask: {msg:'Loading History...'},
|
|
|
|
viewConfig: {
|
|
forceFit:true
|
|
},
|
|
|
|
view: new Ext.grid.GridView({
|
|
forceFit: true,
|
|
emptyText: "No History",
|
|
enableRowBody:true
|
|
}),
|
|
|
|
columns: [
|
|
{header: 'Id', width: 10, sortable: true, dataIndex: 'id', hidden:true},
|
|
{header: 'Domain', sortable: true, dataIndex: 'domain'},
|
|
{header: 'Port', width: 30, sortable: true, dataIndex: 'port'},
|
|
{header: 'Method', width: 30, sortable: true, dataIndex: 'method'},
|
|
{header: 'Path', sortable: true, dataIndex: 'path'},
|
|
{header: 'Res Code', width: 35, sortable: true, dataIndex: 'response_status_code'},
|
|
{header: 'Res Text', width: 50, sortable: true, dataIndex: 'response_status_text'},
|
|
{header: 'Port Status', width: 40, sortable: true, dataIndex: 'response_port_status'},
|
|
{header: 'Processed', width: 50, sortable: true, dataIndex: 'has_ran'},
|
|
{header: 'Req Date', width: 50, sortable: true, dataIndex: 'request_date'},
|
|
{header: 'Res Date', width: 50, sortable: true, dataIndex: 'response_date'}
|
|
|
|
],
|
|
|
|
listeners: {
|
|
rowclick: function(grid, rowIndex) {
|
|
var tab_panel = Ext.getCmp('zombie-requester-tab-zombie-'+zombie.session);
|
|
var r = grid.getStore().getAt(rowIndex).data;
|
|
|
|
if(r.has_ran != "complete") {
|
|
commands_statusbar.update_fail("Response for this request has not been received yet.");
|
|
return;
|
|
}
|
|
|
|
if(!tab_panel.get('requester-response-'+r.id)) {
|
|
genResultTab(r, zombie, commands_statusbar);
|
|
}
|
|
},
|
|
afterrender: function(datagrid) {
|
|
datagrid.store.reload({params:{start:0,limit:req_pagesize, sort: "date", dir:"DESC"}});
|
|
}
|
|
|
|
// Uncomment it when we'll add a contextMenu (right click on a row) in the history grid
|
|
// ,rowcontextmenu: function(grid, rowIndex, event){
|
|
// event.stopEvent();
|
|
//
|
|
// history_panel_context_menu.showAt(event.xy);
|
|
// history_panel_context_menu.rowIndex = rowIndex;
|
|
// history_panel_context_menu.dbIndex = getHttpDbId(grid, rowIndex);
|
|
// }
|
|
}
|
|
});
|
|
|
|
|
|
var history_panel = new Ext.Panel({
|
|
id: 'requester-history-panel-zombie-'+zombie.session,
|
|
title: 'History',
|
|
items:[history_panel_grid],
|
|
layout: 'fit',
|
|
|
|
listeners: {
|
|
activate: function(history_panel) {
|
|
history_panel.items.items[0].store.reload({params:{url:'/ui/requester/history.json'}});
|
|
}
|
|
}
|
|
});
|
|
|
|
// Return the extension_requester_http table row ID given a grid row index
|
|
function getHttpDbId(grid, rowIndex){
|
|
var row = grid.getStore().getAt(rowIndex).data;
|
|
var result = null;
|
|
if(row != null){
|
|
result = row.id;
|
|
}
|
|
return result;
|
|
}
|
|
|
|
// Function generating the requests panel to send raw requests
|
|
//-------------------------------------------------------------
|
|
function genRawRequestPanel(zombie, bar, value) {
|
|
var form = new Ext.FormPanel({
|
|
title: 'Forge Raw HTTP Request',
|
|
id: 'requester-request-form-zombie'+zombie.session,
|
|
url: '/ui/requester/send',
|
|
hideLabels : true,
|
|
border: false,
|
|
padding: '3px 5px 0 5px',
|
|
|
|
items:[{
|
|
xtype: 'textarea',
|
|
id: 'raw-request-zombie-'+zombie.session,
|
|
name: 'raw_request',
|
|
width: '100%',
|
|
height: '100%',
|
|
allowBlank: false
|
|
}],
|
|
|
|
buttons: [{
|
|
text: 'Send',
|
|
handler: function() {
|
|
var form = Ext.getCmp('requester-request-form-zombie'+zombie.session).getForm();
|
|
|
|
bar.update_sending('Sending request to ' + zombie.ip + '...');
|
|
|
|
form.submit({
|
|
params: {
|
|
nonce: Ext.get("nonce").dom.value,//insert the nonce with the form
|
|
zombie_session: zombie.session
|
|
},
|
|
success: function() {
|
|
bar.update_sent("Request sent to hooked browser " + zombie.ip);
|
|
},
|
|
failure: function() {
|
|
bar.update_fail("Error! Invalid http request.");
|
|
}
|
|
});
|
|
}
|
|
}]
|
|
});
|
|
|
|
if(!value) {
|
|
if (zombie.domain) {
|
|
value = "GET /demos/secret_page.html HTTP/1.1\n";
|
|
value += "Host: "+zombie.domain+":3000\n";
|
|
} else value = "GET / HTTP/1.1\nHost: \n";
|
|
}
|
|
|
|
form.get('raw-request-zombie-'+zombie.session).value = value;
|
|
|
|
panel = Ext.getCmp('requester-forge-requests-zombie-'+zombie.session);
|
|
panel.setTitle('Forge Request');
|
|
panel.add(form);
|
|
};
|
|
|
|
// Function generating the panel that shows the results of a request
|
|
// This function is called when the user clicks on a row in the grid
|
|
// showing the results in the history.
|
|
//------------------------------------------------------------------
|
|
function genResultTab(request, zombie, bar) {
|
|
var tab_panel = Ext.getCmp('zombie-requester-tab-zombie-'+zombie.session);
|
|
|
|
bar.update_sending('Getting response...');
|
|
|
|
Ext.Ajax.request({
|
|
url: '/ui/requester/response.json',
|
|
loadMask: true,
|
|
|
|
params: {
|
|
nonce: Ext.get("nonce").dom.value,
|
|
http_id: request.id
|
|
},
|
|
|
|
success: function(response) {
|
|
var xhr = Ext.decode(response.responseText);
|
|
|
|
var tab_result_response_headers = new Ext.Panel({
|
|
title: 'Response Headers',
|
|
border: false,
|
|
collapsed: true,
|
|
layout: 'fit',
|
|
padding: '5px 5px 5px 5px',
|
|
items:[new Ext.form.TextArea({id: 'requester-response-res-headers-'+request.id, value: xhr.result.response_headers + "\n"})]
|
|
});
|
|
|
|
var tab_result_response_body = new Ext.Panel({
|
|
title: 'Response Body',
|
|
border: false,
|
|
collapsed: false,
|
|
layout: 'fit',
|
|
padding: '5px 5px 5px 5px',
|
|
items:[new Ext.form.TextArea({id: 'requester-response-res-body-'+request.id, value: xhr.result.response + "\n"})]
|
|
});
|
|
|
|
var tab_result_request = new Ext.Panel({
|
|
title: 'Request',
|
|
border: false,
|
|
collapsed: true,
|
|
layout: 'fit',
|
|
padding: '5px 5px 5px 5px',
|
|
items:[new Ext.form.TextArea({id: 'requester-response-req-'+request.id, value: xhr.result.request})]
|
|
});
|
|
|
|
var tab_result_accordion = new Ext.Panel({
|
|
id: 'requester-response-'+request.id,
|
|
title: request.path,
|
|
split: true,
|
|
border: false,
|
|
layout:'accordion',
|
|
closable: true,
|
|
items:[tab_result_request, tab_result_response_headers, tab_result_response_body]
|
|
});
|
|
|
|
tab_panel.add(tab_result_accordion);
|
|
tab_panel.activate(tab_result_accordion.id);
|
|
|
|
bar.update_sent("Displaying response.");
|
|
},
|
|
|
|
failure: function() {
|
|
bar.update_fail("Error! Could not retrieve the response.");
|
|
}
|
|
});
|
|
};
|
|
|
|
|
|
ZombieTab_Requester.superclass.constructor.call(this, {
|
|
id: 'zombie-requester-tab-zombie-'+zombie.session,
|
|
title: 'Requester',
|
|
activeTab: 0,
|
|
viewConfig: {
|
|
forceFit: true,
|
|
type: 'fit'
|
|
},
|
|
|
|
items: [history_panel, requests_panel],
|
|
|
|
bbar: commands_statusbar,
|
|
|
|
listeners: {
|
|
afterrender : function(){
|
|
genRawRequestPanel(zombie, commands_statusbar);
|
|
}
|
|
}
|
|
});
|
|
|
|
};
|
|
|
|
Ext.extend(ZombieTab_Requester, Ext.TabPanel, {});
|