From a92d4d910c559a79ea12cb18fb864cadabfff464 Mon Sep 17 00:00:00 2001 From: Jack Walker Date: Mon, 6 Jul 2020 12:44:19 +1000 Subject: [PATCH 1/4] Fixed getElementById method being called on incorrect object causing looping failure. --- config.yaml | 2 +- modules/social_engineering/pretty_theft/command.js | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config.yaml b/config.yaml index d4d93e81b9..64039f64ff 100644 --- a/config.yaml +++ b/config.yaml @@ -18,7 +18,7 @@ beef: # Used by both the RESTful API and the Admin interface credentials: user: "beef" - passwd: "beef" + passwd: "beef1" # Interface / IP restrictions restrictions: diff --git a/modules/social_engineering/pretty_theft/command.js b/modules/social_engineering/pretty_theft/command.js index da5b9f3a13..cbd7a82557 100644 --- a/modules/social_engineering/pretty_theft/command.js +++ b/modules/social_engineering/pretty_theft/command.js @@ -93,9 +93,9 @@ beef.execute(function() { $j('#popup').remove(); $j('#darkenScreenObject').remove(); - }else if((uname1.length == 0 || pass1.length == 0) && valcheck == "true"){ + } else if((uname1.length == 0 || pass1.length == 0) && valcheck == "true") { // If user has not entered any data, reset button - document.body.lastChild.getElementById("buttonpress").value = "false"; + document.getElementById("buttonpress").value = "false"; alert("Please enter a valid username and password."); } } From a8606697e0a61c8dbcda7e4bfa61e089a043ddf8 Mon Sep 17 00:00:00 2001 From: Jack Walker Date: Mon, 6 Jul 2020 12:44:43 +1000 Subject: [PATCH 2/4] Reset creds --- config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config.yaml b/config.yaml index 64039f64ff..d4d93e81b9 100644 --- a/config.yaml +++ b/config.yaml @@ -18,7 +18,7 @@ beef: # Used by both the RESTful API and the Admin interface credentials: user: "beef" - passwd: "beef1" + passwd: "beef" # Interface / IP restrictions restrictions: From 9696b05abaca0ca4ae814b42a8062269fb79ccce Mon Sep 17 00:00:00 2001 From: Jack Walker Date: Mon, 6 Jul 2020 14:39:04 +1000 Subject: [PATCH 3/4] Fixed error causing some ARE rules to not run. --- arerules/enabled/confirm_close_tab.json | 20 ++++++++++++++++++++ core/main/autorun_engine/engine.rb | 2 +- 2 files changed, 21 insertions(+), 1 deletion(-) create mode 100644 arerules/enabled/confirm_close_tab.json diff --git a/arerules/enabled/confirm_close_tab.json b/arerules/enabled/confirm_close_tab.json new file mode 100644 index 0000000000..6ca76158e7 --- /dev/null +++ b/arerules/enabled/confirm_close_tab.json @@ -0,0 +1,20 @@ +{"name": "Confirm Close Tab", + "author": "mgeeky", + "browser": "ALL", + "browser_version": "ALL", + "os": "ALL", + "os_version": "ALL", + "modules": [ + {"name": "confirm_close_tab", + "condition": null, + "code": null, + "options": { + "text":"Are you sure you want to navigate away from this page?", + "usePopUnder":"true" + } + } + ], + "execution_order": [0], + "execution_delay": [0], + "chain_mode": "sequential" +} diff --git a/core/main/autorun_engine/engine.rb b/core/main/autorun_engine/engine.rb index 33842ca88e..5b9763f16a 100644 --- a/core/main/autorun_engine/engine.rb +++ b/core/main/autorun_engine/engine.rb @@ -92,7 +92,7 @@ def trigger(rule_ids, hb_id) :rule_token => rule_token, :mod_body => wrapper, :is_sent => false, - :rule_id => rule_id + :id => rule_id ) are_exec.save! # Once Engine.check() verified that the hooked browser match a Rule, trigger the Rule ;-) From 8e0a1b6b8733d191aba7b43dfdbdcc97d25ddc71 Mon Sep 17 00:00:00 2001 From: Jack Walker Date: Mon, 6 Jul 2020 14:40:01 +1000 Subject: [PATCH 4/4] Removed rule left in ARE enabled directory --- arerules/enabled/confirm_close_tab.json | 20 -------------------- 1 file changed, 20 deletions(-) delete mode 100644 arerules/enabled/confirm_close_tab.json diff --git a/arerules/enabled/confirm_close_tab.json b/arerules/enabled/confirm_close_tab.json deleted file mode 100644 index 6ca76158e7..0000000000 --- a/arerules/enabled/confirm_close_tab.json +++ /dev/null @@ -1,20 +0,0 @@ -{"name": "Confirm Close Tab", - "author": "mgeeky", - "browser": "ALL", - "browser_version": "ALL", - "os": "ALL", - "os_version": "ALL", - "modules": [ - {"name": "confirm_close_tab", - "condition": null, - "code": null, - "options": { - "text":"Are you sure you want to navigate away from this page?", - "usePopUnder":"true" - } - } - ], - "execution_order": [0], - "execution_delay": [0], - "chain_mode": "sequential" -}