ce4018d464
Enabled IPEC extension in main config.yaml
2012-10-22 17:26:59 +11:00
636fee9607
Modified Fake_flash_update module (with drop-down menu) to support Firefox Extension delivery.
2012-10-22 17:25:16 +11:00
9aab6f1cf4
Patched jquery-encoder to prevent exception on encoderForJavascript. Patched wterm.jquery.js to prevent XSS. Added IP/port validation to IPEC shell.
2012-10-22 17:19:46 +11:00
aae9f5b66c
Removed dead code from the IPEC admin_ui tab panel.
2012-10-22 16:12:43 +11:00
aa1efd1c73
Added new IPEC admin_ui tab. This includes the new Wterm-based interactive shell to communicate with the BeEF_bind shellcode.
2012-10-22 16:09:34 +11:00
79bf6f4a9f
Added BeEF_bind send_command module: this is used to communicate with the BeEF_bind shellcode (including in the IPEC admin_ui shell).
2012-10-22 16:07:31 +11:00
e257f8bb52
Added BeEF_bind deployer module: send both shellcode stager and stage to a specific target. Eudora IMAP 3 (Win) is the only available exploit atm.
2012-10-22 16:03:47 +11:00
b8c36b206b
Added first implementation of the IPEC extension, including the malicious FirefoxExtension.
2012-10-22 15:52:15 +11:00
5a2f30a0c0
Added a bunch of new RESTful API calls: get categories, search module by name.
2012-10-22 15:30:27 +11:00
cbbb9e0d67
Added feature to bind_socket in AssetHandler: now it's possible to retrieve the raw data sent to the socket.
2012-10-22 15:24:21 +11:00
af53f0fd0b
Catching exception in web_cloner when determining if page can be framed.
2012-10-22 15:22:04 +11:00
91e1411888
Added support for Chrome 22
2012-10-19 09:35:29 +10:30
042ee1b0aa
Hide QRcode for localhost/127.0.0.1 interface
2012-10-19 09:15:07 +10:30
2863fafc2a
Added support for Firefox 16
...
Fixed bug where new versions of Firefox are detected as Safari
Added placeholder for IE10
2012-10-16 20:39:28 +10:30
b20dec0adf
ISSUES #713 Fixed
2012-10-14 01:52:17 +02:00
aad6228ea8
Fix issues #757 : normalizing mount points for web_cloner in case they contain params.
2012-10-11 11:21:06 +01:00
8e9f82ff2a
Merge pull request #756 from bmantra/master
...
added some more default paths for metasploit-autolaunch
2012-10-07 10:28:01 -07:00
22bb8998b2
added more default paths for the msf-autolaunch
2012-10-07 19:26:02 +02:00
0f81e38635
Fix YAML config: extensions/social_engineering/config.yaml
...
Prevents this error due to lack of white space between array elements:
`[!] Unable to load extension configuration '/pentest/web/beef-git/extensions/social_engineering/config.yaml'`
2012-10-07 17:57:51 +10:30
2b3654b1bb
Merge pull request #755 from bmantra/master
...
HP uCMDB CSRF add user module
2012-10-05 04:26:20 -07:00
03da56fc7d
HP uCMDB CSRF add user module
2012-10-05 13:23:24 +02:00
a0891dbccb
Merge pull request #754 from bmantra/master
...
For now disable the auto msfrpcd load by default
2012-10-04 11:55:54 -07:00
d04461d8ff
disable auto msfrpcd
2012-10-04 20:50:51 +02:00
f10f374a72
Merge pull request #753 from bmantra/master
...
Initial metasploit auto launch commit #96
2012-10-04 11:03:35 -07:00
480e797853
auto launch metasploit initial commit
2012-10-04 19:53:36 +02:00
50df4f1e35
Merge pull request #752 from gallypette/master
...
New template for simple_hijacker social engineering module.
2012-10-01 08:40:13 -07:00
7e43e15838
modified config.yaml of simple_hijacker to activate chromecertbeggar2.js template
2012-10-01 16:11:18 +02:00
104f8189d3
added chromecertbeggar2.js
2012-10-01 16:06:45 +02:00
ba20f17831
Ugh. Apparently target can't be null. Fixed.
2012-09-30 18:50:28 +09:30
a135e9f51f
Update supported browsers for multiple modules
...
Pretty Theft module does not work in IE
Multiple exploit modules haven't been tested
2012-09-29 17:39:14 +09:30
256f63d28a
Merge pull request #748 from pwndizzle/master
...
Update to Pretty_Theft module
2012-09-23 00:18:49 -07:00
95f5d78acc
Update supported browsers for lcamtuf download module
...
Opera blocks the `data:` URL popup by default.
Safari is no longer listed as either supported nor unsupported pending
further testing.
2012-09-23 16:04:25 +09:30
483683ca78
Added Facebook and Linkedin popups, also some code/logic improvements
2012-09-22 18:38:09 +08:00
fe87d382db
Merge pull request #747 from gallypette/master
...
Small change in Chromecertbeggar template of simple_hijacker module
2012-09-20 03:31:57 -07:00
68bfb46bc7
remplace setInterval by setTimeout in chromecerbeggar.js template
2012-09-20 11:26:27 +02:00
edf99db187
Merge pull request #746 from bmantra/master
...
fix for jboss exploit
2012-09-18 12:01:44 -07:00
9b62ae83dc
fix jboss exploit with forge_request
2012-09-18 20:59:54 +02:00
9c7c81bd7f
Web_cloner: managed a corner case when html elements are uppercase (HEAD, FORM)
2012-09-17 12:54:10 +01:00
e56b083ad5
Fixed typos in readme.txt for web_cloner
2012-09-17 11:03:13 +01:00
074ca17e42
Added missing cloned_page directory to web_cloner. Added readme.txt on that directory. Enabled the social engineering extension by default. Enabled all the obfuscation techniques in the evasion extension config.
2012-09-17 10:58:07 +01:00
87e3262bae
Tidied up splash
2012-09-14 21:36:50 +10:00
c8b7b506fa
Tidied up splash
2012-09-14 21:24:10 +10:00
921a9928ff
Added twitter account to stdout
2012-09-14 21:10:32 +10:00
62768e1ea2
Changed update method in stdout
2012-09-14 21:08:47 +10:00
3b07e700a5
Merge pull request #744 from webstersprodigy/improved-clickjacking
...
Clickjacking Module Update: Better reliability in IE
2012-09-12 19:31:22 -07:00
0b852dd308
Made namespaces consistent and expanded body
...
Adding feedback I missed earlier regarding namespaces. Also since
we're using body instead of window (for IE support), expanding the
body so that the mouse follows everywhere.
2012-09-11 23:17:50 -07:00
2720a5a8b9
Better reliability in IE
2012-09-11 13:09:37 -07:00
1c1f2d1f1c
Merge pull request #743 from webstersprodigy/improved-clickjacking
...
Improved clickjacking
2012-09-10 23:02:14 -07:00
bcf842587f
Fixed several minor bugs
2012-09-10 15:36:57 -07:00
cef72c9518
Improved Clickjacking Module
...
Rewrite of bcole's module. Adds support for multiple clicks, Javascript
event feedback, some basic framebusting evasion, and IE support
2012-09-10 14:25:46 -07:00
antisnatchor