-
Notifications
You must be signed in to change notification settings - Fork 2.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The UI management page does not display the hook IP host #1750
Comments
I have no idea what you're asking, but maybe this will help: https://github.com/beefproject/beef/wiki/Configuration |
The format of the configuration file changed between 0.4.7.x and 0.4.7.4. You must use an array < 0.4.7.3 restrictions:
# subnet of IP addresses that can hook to the framework
permitted_hooking_subnet: "0.0.0.0/0"
# subnet of IP addresses that can connect to the admin UI
#permitted_ui_subnet: "127.0.0.1/32"
permitted_ui_subnet: "0.0.0.0/0" 0.4.7.3+ restrictions:
# subnet of IP addresses that can hook to the framework
permitted_hooking_subnet: ["0.0.0.0/0", "::/0"]
# subnet of IP addresses that can connect to the admin UI
#permitted_ui_subnet: ["127.0.0.1/32", "::1/128"]
permitted_ui_subnet: ["0.0.0.0/0", "::/0"] |
The 4.7.3 default configuration I use is just a change to the server IP address, not to what you said. |
In version 4.7.3 ,I can access "http://192.168.1.8:3000/demos/basic.html" normally, but the "online browser" option of http://192.168.1.8:3000/ui/panel does not display the host that has been blocked. |
What version are you using? Are you using an non-default configuration? Have you changed any other configuration options? Are you getting any errors in the web browser console? What terminal output do you get with |
I upgraded to version 4.7.3 with apt install beef-xss on kali. The configuration has only changed the http server address and credentials, and the rest of the configuration has not changed. |
root@kali:/usr/share/beef-xss# vim config.yaml |
I can implement module functionality with previously written code that invokes the API interface, but the administrative interface simply does not display the hooked online browser |
That's strange. I'm not sure what the problem is. 我不知道 Your configuration looks fine. Are there any errors in the web browser development console? (CTRL + SHIFT + J). 在猜测 At a guess, perhaps it is an issue with your local If the API works, then it is probably an issue with the Admin UI JavaScript. Sorry, I won't have time to look into fixing this any time soon. |
Perhaps this will work as a temporary fix: diff --git a/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js b/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
index 5cd3b779..f8ac3fe2 100644
--- a/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
+++ b/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
@@ -492,7 +492,7 @@ try{
balloon_text += " <img width='13px' height='13px' class='zombie-tree-icon' src='<%= @base_path %>/media/images/icons/unknown.png' /> ";
balloon_text += "Location: Unknown";
} else {
- balloon_text += " <img width='13px' height='13px' class='zombie-tree-icon' src='<%= @base_path %>/media/images/icons/country-squared/" + escape(hooked_browser.country_code.toLowerCase()) + ".svg' /> ";
+ //balloon_text += " <img width='13px' height='13px' class='zombie-tree-icon' src='<%= @base_path %>/media/images/icons/country-squared/" + escape(hooked_browser.country_code.toLowerCase()) + ".svg' /> ";
balloon_text += "Location: " + hooked_browser.city + ", " + hooked_browser.country;
}
@@ -509,7 +509,7 @@ try{
if (hooked_browser.country == 'Unknown') {
text += "<img width='13px' height='13px' class='zombie-tree-icon' src='<%= @base_path %>/media/images/icons/unknown.png' /> ";
} else {
- text += "<img width='13px' height='13px' class='zombie-tree-icon' src='<%= @base_path %>/media/images/icons/country-squared/" + escape(hooked_browser.country_code.toLowerCase()) + ".svg' /> ";
+ //text += "<img width='13px' height='13px' class='zombie-tree-icon' src='<%= @base_path %>/media/images/icons/country-squared/" + escape(hooked_browser.country_code.toLowerCase()) + ".svg' /> ";
}
text += hooked_browser.ip; |
Change if to try? |
That will fix the error as a temporary solution. It will not resolve the underlying problem. The The appropriate fix should be to ensure that I don't have time to look into what is causing the issue at the moment. I tested on my test system with |
thanks ! |
edit the script which throws the country error using vs code permission sudo code --user-data-dir="~/.vscode-root" usr/share/beef-xss/extensions/admin_ui/media/javascript-min/web_ui_all.js find e.country_code and replace with mactching one , the images are here |
I am getting the same issue. I dont know why. And I dont want to change the minified code. That's just weird. |
Fixed in #1975. Although the root cause of |
Zombie hosts can access hook subpages properly .User can be hooked and UI pages also have log, but do not display online hosts, making it impossible to use the beef module
The text was updated successfully, but these errors were encountered: