handler.rb

#
# Copyright (c) 2006-2025 Wade Alcorn - [email protected]
# Browser Exploitation Framework (BeEF) - https://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
module BeEF
  module Extension
    module Customhook
      class Handler
        def call(env)
          @body = ''
          @request = Rack::Request.new(env)
          @params = @request.query_string
          @response = Rack::Response.new(body = [], 200, header = {})
          config = BeEF::Core::Configuration.instance
          eruby = Erubis::FastEruby.new(File.read("#{File.dirname(__FILE__)}/html/index.html"))
          config.get('beef.extension.customhook.hooks').each do |h|
            path = config.get("beef.extension.customhook.hooks.#{h.first}.path")
            next unless path == (env['REQUEST_URI']).to_s

            print_info "[Custom Hook] Handling request for custom hook mounted at '#{path}'"
            @body << eruby.evaluate({
                                      'customhook_target' => config.get("beef.extension.customhook.hooks.#{h.first}.target"),
                                      'customhook_title' => config.get("beef.extension.customhook.hooks.#{h.first}.title")
                                    })
            break
          end

          @response = Rack::Response.new(
            body = [@body],
            status = 200,
            header = {
              'Pragma' => 'no-cache',
              'Cache-Control' => 'no-cache',
              'Expires' => '0',
              'Content-Type' => 'text/html',
              'Access-Control-Allow-Origin' => '*',
              'Access-Control-Allow-Methods' => 'POST, GET'
            }
          )
        end

        # @note Object representing the HTTP request
        @request

        # @note Object representing the HTTP response
        @response
      end
    end
  end
end