beefproject/beef — pull request #679 by 0x7674 (2012-05-18 10:15:00+00:00)
Title: 'Clippy' Module

After @pipesec gave his BeEF talk at OWASP NZ a couple of weeks ago, @dend3n and I got drunk and decided this was a good idea. This module will instantiate a little Clippy animation in the bottom right hand screen of the browser, nagging the user to upgrade (to the binary of the attacker's choice). If the user selects 'Not now', Clippy disappears and returns after an attacker-set period (5secs default).

It would be cool to eventually have greater integration with MSF for this module - e.g. specify a browser install binary, LHOST, LPORT, and MSF payload, and use msfvenom to inject the payload into the browser install binary. Also thinking about a BonziBuddy incarnation..

The images are currently loaded from a third party site, where we got the Clippy picture from. I'm not sure about how licensing will work for this so I have left it as user-selectable for now.

I'm x7674 in the freenode channel if you wanna hit me up.

Cheers,

vt.