[Exploits]

Hey guys i noticed there wasn't a beef framework tutorial so i figured id put one up!!!!

What is BeEF?

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser.

Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.


so first navigate to beef by: applications>backtrack>Exploitation tools>Social engineering tools>BEEF XSS Framework

If this is your first time running BEEF you will want to click the install option first!!!!

so after installing start beef!! it should look like this:


then we will copy the UI URL near the bottom, and paste it into our web browser

it will prompt a login screen the default login is
username: beef
password: beef


once logged in we will have to hook a browser, for tutorial purposes i will use the demo hooked page. but later on you will be able to incorporate the BEEF hook into pretty much anything you like



so when we send the victim the BEEF hooked page, as long as he stays there WE HAVE HIM BY THE BALLS!!! when he leaves the page the connection will be lost, but there are all sorts of persistence tools to infect all tabs with the BEEF hook :ok:

the advanced BEEF demo page look like this:


As you can see i have visited the hooked page and am now a ''hooked browser''


so thats pretty much it!!! BEEF is a super simple amazing tool i hope somebody finds this useful.

im gonna add a few more pics to let you see the commands

[Ex094]

Nice work, This will come in handy!

[Exploits]

Nice work, This will come in handy!

thanks appreciate it!!!

[Riverclawz]

Dude i loved to mess around with this on backtrack, a shame it's not standard on Kali... :CC
Perhaps you could update your current post with a tut to install it on kali. I'll even offer my help to do so!
Still a great post!

[Riverclawz]

Dude i loved to mess around with this on backtrack, a shame it's not standard on Kali... :CC
Perhaps you could update your current post with a tut to install it on kali. I'll even offer my help to do so!
Still a great post!

[Exploits]

Dude i loved to mess around with this on backtrack, a shame it's not standard on Kali... :CC
Perhaps you could update your current post with a tut to install it on kali. I'll even offer my help to do so!
Still a great post!

yeah i know its a shame, why the F*ck would they take it out? :nono: but anyways im pretty busy today, but when i get some free time i can definitely do that for you sir @Riverclawz

[Exploits]

Dude i loved to mess around with this on backtrack, a shame it's not standard on Kali... :CC
Perhaps you could update your current post with a tut to install it on kali. I'll even offer my help to do so!
Still a great post!

yeah i know its a shame, why the F*ck would they take it out? :nono: but anyways im pretty busy today, but when i get some free time i can definitely do that for you sir @Riverclawz

[MrGeek]

That's a nice pretty tut mate
Love it. Thanks a lot

[soh_cah_toa]

Thanks for the detail introduction about Beef, i have one question
How can we inject the url in live website and compromise the victim pc ?

There's a good tutorial on it *Here*.

BANG! You're dead.

Relax, it's just a link to Google. I promise. But you see my point. BeEF leaves it up to you to direct victims to the hook URL. That could mean mass mailing, phishing, or just simply posting a link in a public place like a forum or Twitter.