Commit Graph

142 Commits

Author SHA1 Message Date
bcoles@gmail.com 5ea6dd9fd2 Added Firefox 8 detection
In preperation for Firefox 8 (the beta is public)



git-svn-id: https://beef.googlecode.com/svn/trunk@1385 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-30 12:07:17 +00:00
antisnatchor 5f59e198d1 Added Chrome 15 detection
git-svn-id: https://beef.googlecode.com/svn/trunk@1384 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-29 14:52:59 +00:00
passbe 3b72fe969c Removed incorrect logic from previous testing
git-svn-id: https://beef.googlecode.com/svn/trunk@1382 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-24 10:21:36 +00:00
passbe 24fe856b0c Module config max_ver now has the ability to use 'latest'
git-svn-id: https://beef.googlecode.com/svn/trunk@1381 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-24 10:14:01 +00:00
passbe a1bb393407 Configuration now gracefully fails if there is a problem with *.yaml
git-svn-id: https://beef.googlecode.com/svn/trunk@1380 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-24 09:54:00 +00:00
passbe d1201e70a2 Corrected min_ver, max_ver bug. Fixes issue 489. Fixes issue 525.
git-svn-id: https://beef.googlecode.com/svn/trunk@1379 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-24 07:00:29 +00:00
wade@bindshell.net 801d098e97 Another test added which greps the source base for the eval function.
git-svn-id: https://beef.googlecode.com/svn/trunk@1375 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-20 13:51:12 +00:00
avlidienbrunn@gmail.com f3cd6aaeb5 (Fixes issue 450) Ported MITB code from h.ackack.net!
git-svn-id: https://beef.googlecode.com/svn/trunk@1371 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-19 08:06:36 +00:00
bcoles@gmail.com dd5b1f5a81 Added platform and ActiveX detection to the browser hook initialization
o Platform often provides the architecture (ie, 32bit) and can 
	be useful in identifying devices / smart phones

	o ActiveX detection was added for obscure browsers (ie, such as 
	software using an embedded browsing engine built on the IE COM)
	Normally ActiveX would only be detected on a hooked IE browser.

Moved the `is_valid_yes_no' filter from browser.rb to base.rb



git-svn-id: https://beef.googlecode.com/svn/trunk@1368 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-16 20:56:23 +00:00
bcoles@gmail.com d0f332643e Separated hostname and hostport
git-svn-id: https://beef.googlecode.com/svn/trunk@1366 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-16 14:25:47 +00:00
buherator@gmail.com ed866886f7 Storing port of HookedBrowser, fixing value of HookedBrowser.domain
git-svn-id: https://beef.googlecode.com/svn/trunk@1365 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-15 22:04:08 +00:00
passbe 65b8652f26 Finished commenting BeEF core. From this point on each developer should be commenting their own core changes
git-svn-id: https://beef.googlecode.com/svn/trunk@1362 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-15 03:59:24 +00:00
antisnatchor e22332e1f8 (Fixes issue 467) rewrote from scratch the XssRays handler, refactored JS and Ruby code, improved the whole thing.
git-svn-id: https://beef.googlecode.com/svn/trunk@1361 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-12 14:56:50 +00:00
buherator@gmail.com ab1ec19a5c Changed BeEF::API::Registra to BeEF::API::Registrar
git-svn-id: https://beef.googlecode.com/svn/trunk@1358 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-09 15:31:52 +00:00
sussurro@happypacket.net 988e7b010e change override_execute so that it will pass the hooked browser session so we can both override functionality and add commands
git-svn-id: https://beef.googlecode.com/svn/trunk@1350 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-10-04 16:57:11 +00:00
wade@bindshell.net a7fda336fd some functions prevented for security reasons
git-svn-id: https://beef.googlecode.com/svn/trunk@1333 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-30 13:38:36 +00:00
wade@bindshell.net 352b6ef7a5 insecure eval funtion has been overloaded
git-svn-id: https://beef.googlecode.com/svn/trunk@1330 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-30 13:18:08 +00:00
passbe 1f61418c87 Commented all ruby patches
git-svn-id: https://beef.googlecode.com/svn/trunk@1321 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-29 23:48:20 +00:00
bcoles@gmail.com f7bca3c192 Added Rewrite HREFs (HTTPS) module
This module will rewrite all the href attributes of HTTPS links to use 
HTTP instead of HTTPS. Links relative to the web root are not rewritten.

Added beef.dom.rewriteLinksProtocol(old_protocol, new_protocol, selector)



git-svn-id: https://beef.googlecode.com/svn/trunk@1317 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-29 09:55:09 +00:00
bcoles@gmail.com 87e5bca2fb Added match for Firefox 7 in preperation for impending release
git-svn-id: https://beef.googlecode.com/svn/trunk@1313 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-28 06:48:27 +00:00
a.m.saafan@gmail.com c6de8c1a0d Added Play Sound module. Also, added support for WEBrick custom MIME types. Fixes issue 51 .
git-svn-id: https://beef.googlecode.com/svn/trunk@1312 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-27 13:25:02 +00:00
sussurro@happypacket.net 6658eff14c fixkup for metasploit to make payloads options be dynamic again.
git-svn-id: https://beef.googlecode.com/svn/trunk@1311 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-26 04:00:02 +00:00
antisnatchor 75b425e5e6 Added detection for Chrome 14
git-svn-id: https://beef.googlecode.com/svn/trunk@1299 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-21 08:29:05 +00:00
bcoles@gmail.com 9127bbeb88 Patched browser detection
Revision 1285 broke browser hooking for Opera, Chrome and Safari.

This commit should fix this issue. Also:

Fixes issue 514
Fixes issue 503



git-svn-id: https://beef.googlecode.com/svn/trunk@1291 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-16 06:21:13 +00:00
abraham.aranguren@gmail.com 2b095f2cf0 Fix for Issue 503: Firefox is identified as Safari:
Under certain configurations Firefox was incorrectly being detected as Safari, this happened because !!window.globalStorage returns false on at least some Firefox 5 and Firefox 6 browser configurations such as mine.

git-svn-id: https://beef.googlecode.com/svn/trunk@1285 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-13 21:39:14 +00:00
antisnatchor@gmail.com d33e9f88b5 (Fixes issue 456) reverted back to jQuery 1.5.2, moved port status checking code in 'complete' handler
git-svn-id: https://beef.googlecode.com/svn/trunk@1284 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-13 18:50:12 +00:00
bcoles@gmail.com 1411226a7c Patched error in DataMapper Data Objects Adapter (dm-do-adapter)
o Error: "DataObjects::URI.new with arguments is deprecated"
o Patch: 
https://github.com/datamapper/dm-do-adapter/commit/7f0b53d1ada8735910e04ff37d60c6ff037ce288

Fixes issue 502



git-svn-id: https://beef.googlecode.com/svn/trunk@1280 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-13 04:26:34 +00:00
wade@bindshell.net eef4f5f4f0 typo fixed
git-svn-id: https://beef.googlecode.com/svn/trunk@1279 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-12 17:53:24 +00:00
bcoles@gmail.com ee6dbe3bee Updated OS detection
o Added icons

	o Removed duplicate entry for Win98



git-svn-id: https://beef.googlecode.com/svn/trunk@1278 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-12 14:54:18 +00:00
bcoles@gmail.com c81bdf75af Updated Safari browser version detection
git-svn-id: https://beef.googlecode.com/svn/trunk@1277 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-12 12:47:29 +00:00
bcoles@gmail.com c596a5c49a Added browser version detection for Safari 5.1
git-svn-id: https://beef.googlecode.com/svn/trunk@1276 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-12 10:45:12 +00:00
passbe 25a35ecace Commented filters
git-svn-id: https://beef.googlecode.com/svn/trunk@1275 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-12 08:34:35 +00:00
passbe 563f9dc6da Yard commented 1/3 of codebase, more to come...
git-svn-id: https://beef.googlecode.com/svn/trunk@1274 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-11 21:52:39 +00:00
antisnatchor@gmail.com b3b869d36f (Fixes issue 498) added exact version detection for all FF browser plugins. For other browser see issue comments in the tracker.
git-svn-id: https://beef.googlecode.com/svn/trunk@1273 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-11 15:27:31 +00:00
antisnatchor@gmail.com 8ab109bc50 (Fixes issue 499) added websocket detection for FF6+
git-svn-id: https://beef.googlecode.com/svn/trunk@1272 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-11 14:08:28 +00:00
bcoles@gmail.com 515dbefacf Fixes issue 483
git-svn-id: https://beef.googlecode.com/svn/trunk@1263 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-08 11:39:18 +00:00
passbe 0403ea0853 Created API override_execute() for modules. Re-wrote is_matched_params? to fix bug and for better parameter matching
git-svn-id: https://beef.googlecode.com/svn/trunk@1257 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 23:56:52 +00:00
passbe 687e058c88 Allowed : through param keys
git-svn-id: https://beef.googlecode.com/svn/trunk@1256 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 23:54:57 +00:00
passbe 93b289c353 Created print_over to allow for printing over the same line
git-svn-id: https://beef.googlecode.com/svn/trunk@1255 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 23:53:53 +00:00
bcoles@gmail.com ca4e2d18f5 Added Android OS detection from useragent
git-svn-id: https://beef.googlecode.com/svn/trunk@1254 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 11:35:20 +00:00
bcoles@gmail.com 203173b621 Added BlackBerry and Nokia (Symbian/Maemo) OS detection from useragent
git-svn-id: https://beef.googlecode.com/svn/trunk@1253 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 10:56:41 +00:00
antisnatchor 3f82b0315a (Fixes issue 427): fixed sending back PoC for POST injection with xssrays.
git-svn-id: https://beef.googlecode.com/svn/trunk@1251 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 10:18:48 +00:00
antisnatchor 10d8edb5fd <xssrays> prevent printing console.log messages if the hooked browser is IE
git-svn-id: https://beef.googlecode.com/svn/trunk@1250 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 09:26:46 +00:00
antisnatchor 5fb6334654 (Fixes issue 405): added attack vector browser checks using the beef.browser API. If the vector is marked as working with only IE, if the browser is FF the attack will be skipped.
git-svn-id: https://beef.googlecode.com/svn/trunk@1249 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-02 09:21:31 +00:00
passbe 7186b75aad Added API BeEF::Module.get_options() override. Added API.matched?() method to determine if a conditional API register is met. API methods can now return data to the core
git-svn-id: https://beef.googlecode.com/svn/trunk@1248 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-09-01 06:45:49 +00:00
antisnatchor f228138fb2 <xssrays> small code cleanup and comments added
git-svn-id: https://beef.googlecode.com/svn/trunk@1247 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-08-31 11:11:42 +00:00
antisnatchor 4fc61d4c47 (Fixes issue 403): added handler: "xssrays" to xssrays.js. This is why beef.net.send was never called.
git-svn-id: https://beef.googlecode.com/svn/trunk@1246 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-08-31 10:00:22 +00:00
antisnatchor 59bfab48a3 (Fixes issue 406): when checking for URI path Xss, remove the last / from the url in case there is one. It will be added later.
git-svn-id: https://beef.googlecode.com/svn/trunk@1245 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-08-31 08:43:57 +00:00
antisnatchor cfe0b3e87b <xssrays> removed browser checks and fixed unreferenced variable sameDomain (now is crossDomain)
git-svn-id: https://beef.googlecode.com/svn/trunk@1244 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-08-31 08:24:17 +00:00
bcoles@gmail.com 7a4b07ef2e Added "Has WebSockets" to initialization / details tab
git-svn-id: https://beef.googlecode.com/svn/trunk@1237 b87d56ec-f9c0-11de-8c8a-61c5e9addfc9
2011-08-26 13:28:53 +00:00