diff --git a/documentation-payload/Cazalla/commands.md b/documentation-payload/Cazalla/commands.md index e1a5953..5f02843 100644 --- a/documentation-payload/Cazalla/commands.md +++ b/documentation-payload/Cazalla/commands.md @@ -902,6 +902,59 @@ keylog_stop --- +### `browser_info` - Identify Installed Browsers + +Identify installed web browsers and the default browser on the target system. + +**Syntax:** +``` +browser_info +``` + +**Parameters:** None + +**Examples:** +``` +browser_info +``` + +**Features:** +- Detects multiple browsers: Google Chrome, Microsoft Edge, Mozilla Firefox, Opera, Brave +- Displays installation paths for each detected browser +- Shows version information when available +- Identifies the system's default browser +- Read-only operation - does not modify system state +- Low detection risk - only reads registry and file system + +**Output:** +``` +=== Installed Browsers === + +[1] Google Chrome + Path: C:\Program Files\Google\Chrome\Application\chrome.exe + Version: 120.0.6099.109.0 + +[2] Microsoft Edge + Path: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe + Version: 120.0.2210.91.0 + +=== Default Browser === + +Name: Google Chrome +Path: C:\Program Files\Google\Chrome\Application\chrome.exe +``` + +**OPSEC Considerations:** +- Low detection risk - read-only operations are rarely flagged +- Registry reads may be logged if registry auditing is enabled +- File system access may be logged if file auditing is enabled +- No process creation or network activity +- No file modifications + +**Related:** [System Information Gathering](features.md#system-information-gathering), [Detailed Documentation](commands/browser_info.md) + +--- + ## Control Commands ### `sleep` - Adjust Beacon Interval