handler.rb

#
# Copyright (c) 2006-2025 Wade Alcorn - [email protected]
# Browser Exploitation Framework (BeEF) - https://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
module BeEF
  module Extension
    module Requester
      #
      # The http handler that manages the Requester.
      #
      class Handler
        H = BeEF::Core::Models::Http
        Z = BeEF::Core::Models::HookedBrowser

        def initialize(data)
          @data = data
          setup
        end

        def setup
          # validates the hook token
          beef_hook = @data['beefhook'] || nil
          if beef_hook.nil?
            print_error 'beefhook is null'
            return
          end

          # validates the request id
          request_id = @data['cid'].to_s
          if request_id == ''
            print_error 'Original request id (command id) is null'
            return
          end

          unless BeEF::Filters.nums_only?(request_id)
            print_error 'Original request id (command id) is invalid'
            return
          end

          # validates that a hooked browser with the beef_hook token exists in the db
          zombie_db = Z.where(session: beef_hook).first || nil
          if zombie_db.nil?
            (print_error 'Invalid beefhook id: the hooked browser cannot be found in the database'
             return)
          end

          # validates that we have such a http request saved in the db
          http_db = H.where(id: request_id.to_i, hooked_browser_id: zombie_db.session).first || nil
          if http_db.nil?
            print_error 'Invalid http_db: no such request found in the database'
            return
          end

          # validates that the http request has not been run before
          if http_db.has_ran.eql? 'complete'
            (print_error 'This http request has been saved before'
             return)
          end

          # validates the response code
          response_code = @data['results']['response_status_code'] || nil
          if response_code.nil?
            (print_error 'Http response code is null'
             return)
          end

          # save the results in the database
          http_db.response_headers = @data['results']['response_headers']
          http_db.response_status_code = @data['results']['response_status_code']
          http_db.response_status_text = @data['results']['response_status_text']
          http_db.response_port_status = @data['results']['response_port_status']
          http_db.response_data = @data['results']['response_data']
          http_db.response_date = Time.now
          http_db.has_ran = 'complete'

          # Store images as binary
          # see issue https://github.com/beefproject/beef/issues/449
          http_db.response_data = http_db.response_data.unpack('a*') if http_db.response_headers =~ /Content-Type: image/

          http_db.save
        end
      end
    end
  end
end