5c3e6f1575
git-svn-id: https://beef.googlecode.com/svn/trunk@1046 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
89 lines
3.7 KiB
Ruby
89 lines
3.7 KiB
Ruby
#
|
|
# Copyright 2011 Wade Alcorn wade@bindshell.net
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
module BeEF
|
|
module Core
|
|
module Models
|
|
#
|
|
#
|
|
#
|
|
class HookedBrowser
|
|
|
|
include DataMapper::Resource
|
|
|
|
storage_names[:default] = 'core_hookedbrowsers'
|
|
|
|
property :id, Serial
|
|
property :session, Text, :lazy => false
|
|
property :ip, Text, :lazy => false
|
|
property :firstseen, String, :length => 15
|
|
property :lastseen, String, :length => 15
|
|
property :httpheaders, Text, :lazy => false
|
|
property :domain, Text, :lazy => false # the domain originating the hook request
|
|
property :count, Integer, :lazy => false
|
|
property :has_init, Boolean, :default => false
|
|
property :is_proxy, Boolean, :default => false # if true the HB is used as a tunneling proxy
|
|
|
|
has n, :commands
|
|
has n, :results
|
|
has n, :logs
|
|
#has n, :https
|
|
|
|
#
|
|
# Increases the count of a zombie
|
|
#
|
|
def count!
|
|
if not self.count.nil? then self.count += 1; else self.count = 1; end
|
|
end
|
|
|
|
#
|
|
# Returns the icon representing the browser type the
|
|
# zombie is using (i.e. Firefox, Internet Explorer)
|
|
#
|
|
def browser_icon
|
|
agent = JSON.parse(self.httpheaders)['user-agent'].to_s || nil
|
|
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_UNKNOWN_IMG if agent.nil?
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_IE_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_IE_UA_STR
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_FIREFOX_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_FIREFOX_UA_STR
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_MOZILLA_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_MOZILLA_UA_STR
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_SAFARI_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_SAFARI_UA_STR
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_KONQ_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_KONQ_UA_STR
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_CHROME_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_CHROME_UA_STR
|
|
return BeEF::Extension::AdminUI::Constants::Agents::AGENT_OPERA_IMG if agent.include? BeEF::Extension::AdminUI::Constants::Agents::AGENT_OPERA_UA_STR
|
|
|
|
BeEF::Extension::AdminUI::Constants::Agents::AGENT_UNKNOWN_IMG
|
|
end
|
|
|
|
#
|
|
# Returns the icon representing the os type the
|
|
# hooked browser is running (i.e. Windows, Linux)
|
|
#
|
|
def os_icon
|
|
agent = JSON.parse(self.httpheaders)['user-agent'].to_s || nil
|
|
|
|
return BeEF::Core::Constants::Os::OS_UNKNOWN_IMG if agent.nil?
|
|
return BeEF::Core::Constants::Os::OS_WINDOWS_IMG if agent.include? BeEF::Core::Constants::Os::OS_WINDOWS_UA_STR
|
|
return BeEF::Core::Constants::Os::OS_LINUX_IMG if agent.include? BeEF::Core::Constants::Os::OS_LINUX_UA_STR
|
|
return BeEF::Core::Constants::Os::OS_MAC_IMG if agent.include? BeEF::Core::Constants::Os::OS_MAC_UA_STR
|
|
|
|
BeEF::Core::Constants::Os::OS_UNKNOWN_IMG
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
end
|
|
end |