Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Collect and View Browser Plugin Information #389

Open
justaskingquestions opened this issue May 17, 2018 · 3 comments
Open

Collect and View Browser Plugin Information #389

justaskingquestions opened this issue May 17, 2018 · 3 comments

Comments

@justaskingquestions
Copy link

How can I collect and report informaiton about the Browser Plugins (Adobe Flash, Shockwave, Java etc.) of users visiting the Links in my phishing campaign?

@zeknox
Copy link
Member

zeknox commented May 17, 2018

Likely the best way to get this info is to download the raw apache logs from the Campaign > Reports section. Within the raw Apache logs would have all the Browser details including plugins. You'd likely need to parse out the data you're looking for.

@justaskingquestions
Copy link
Author

Thanks for you quick reply. It is not the user-agent string that I am after but things like the versions of certain plugins. Information that could be used in preparation for a red-team exercise where the users are targeted with browser-/plugin-specific exploits. As far as I am aware such info would probably have to be collected using JS such as the code used at PinLady

@zeknox
Copy link
Member

zeknox commented May 17, 2018

Yup you're correct, we do not have any collection methods via JS but certainly could be incorporated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants