beefproject/beef

update GetStoredCredentials, senglehardt.com, login manager autofill

Open

#1,974 opened on Jul 21, 2020

View on GitHub
 (2 comments) (0 reactions) (0 assignees)JavaScript (8,637 stars) (1,992 forks)batch import
Feature RequestGood First IssueLowModule

Description

I was surprised not to find this trick among the modules https://senglehardt.com/demo/no_boundaries/loginmanager/ Its work in last Chrome_v83 (https require). It has been known since 2017. Need update Commands->Browser->HookedDomain->GetStoredCredentials

Contributor guide

Tech stack
javascript
Domain
security
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Familiarity with BeEF frameworkJavaScriptBrowser security knowledge
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Examine the GetStoredCredentials command module under Commands/Browser/HookedDomain/. Review how other credential related modules work. The senglehardt.com demo shows the exploit technique; adapt the code to capture login manager autofill in Chrome. Ensure the module works with the current BeEF architecture.