ARE REST API cannot find AutorunEngine Models

[Squigilum]

Submit Issue

Summary

Q: Please provide a brief summary of the issue that you experienced.
A: The REST API for the ARE does not work for listing or deleting rules. It will return failure due to an exception in the ARE.

Environment

Please identify the environment in which your issue occurred.

1. BeEF Version: 0.5.0.0

2. Ruby Version: 2.5.1p57

3. Browser Details (e.g. Chrome v81.0): Can be observed with curl 7.68.0

4. Operating System (e.g. OSX Catalina): Ubuntu 18.04

Configuration

Q: Have you made any changes to your BeEF configuration?
A: No

Q: Have you enabled or disabled any BeEF extensions?
A: No

Expected vs. Actual Behaviour

Expected Behaviour:
The REST API for the ARE allows listing of rules by ID (or all) and deletion of rules

Actual Behaviour:
The REST API returns failure, and an error is logged to the BeEF terminal window

Steps to Reproduce

Please provide steps to reproduce this issue.

1. Ensure there is at least one rule in the arerules/enabled folder and start BeEF
2. Attempt to list rules using the ARE REST API (can do via curl http://<BeEF IP>:3000/api/autorun/rule/list/all?token=<token>)
3. The REST call will fail, and the error [!] [ARE] ERROR: uninitialized constant BeEF::Core::AutorunEngine::Models will be seen in the BeEF terminal window.

Additional Information

This issue was introduced in commit 0574bdf, which moved the models folder out of core/main/autorun_engine but did not update the REST API.

See pull request #2020 for a fix for this issue

[TEag1e]

I had the same experience.

Browser Exploitation Framework (BeEF) 0.5.0.0-alpha-pre

curl http://x.x.x.x:3000/api/autorun/rule/list/all?token=xyz