Got Beef? Getting Started with BeEF « Null Byte :: WonderHowTo

With the the general computer users understanding of Information security rising (at least to the point of not clicking on unknown links), and operating system security getting better by default. We need to look for new and creative ways to gain a foothold in a system.Luckily there are tools available to us, such as the one will we be looking at today, The Browser Exploitation Framework.Step 1: Finding BeEFIn Kali can be found under Applications>Kali>Exploitations>BeEF XSS FRAMEWORK,In BT......Step 2: Fire It UpWhen we click on the application we will be greeted with a new tab in our browser that looks like this. Sign in with the default credentials beef/beef.We'll now see this screen, with some important information to read, but for todays purposes we will focus on the first paragraph "Before being able to fully explore the framework you will have to 'hook' a browser. To begin with you can point a browser towards the basic demo page here, or the advanced version here."Step 3: Browser, Meet HooksAfter Clicking on the basic page's link you will see the basic page like this.However if you go back to the BeEF control panel tab you will notice in the far left corner there is a window called HOOKED BROWSERS, in the online browsers section you will see 127.0.0.1, Success!Step 4: Beat the MeatIf we click on our browser session in this far left window, our center window will change and we will be greeted with the details page, here we are displayed all the information BeEF was able to gather for us about the browser, Usually browser fingerprint, plug-ins that are running, all the good stuff we need to know to proceed with storming the castle.Where it says "details" you will notice a series of tabs click on commands, which will bring you here, to an absolute plethora of commands that we can play with, however today we will just focus on a simple but often effective command "Browser Redirection"Step 5: Redirect CommandWhile looking through the commands I'm sure you all noticed a folder called "Browser" which has a child called "Hooked Domain", go there, and you will find a command called "Browser Redirection"You will now notice a window on the far right that Contains a text box, and a little button in the bottom corner that says "execute" click this button and be amazed as the tab that was on the BeEF Demo Site, is redirected to the BeEF home page (or where-ever you pointed it in the text box).Have a play around with BeEF, go to your hooked page from another computer in your local network ( it will be at 192.168..:3000/demos/basic) and I'm sure you will start to see potential, which we will be covering in the next article on teaming BeEF up with one of Master OTW's client side attacks by burying meterpreter into a file and then serving it out using Browser Redirect.In the near future we will also be looking at how to "Hook" other web pages and all sorts of fun stuff that can be done with BeEF.Till then, you stay classy NullByteiansN.B there are images to come, Wonderhowto just doesn't seem to want to let me upload todayWant to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Use beEF (Browser Exploitation Framework)How To:Hack Web Browsers with BeEF to Control Webcams, Phish for Credentials & MoreHow To:Pull Italian Beef for Italian Beef SandwichExploiting XSS with BeEF:Part 2Hack Like a Pro:How to Get Facebook Credentials Without Hacking FacebookHow To:Use BeEF and JavaScript for ReconnaissanceHow To:Make beef bourguignon with smoky bacon with Tyler FlorenceHow To:BeEF - the Browser Exploitation Framework Project OVER WANHow To:Hook Web Browsers with MITMf and BeEFHow To:Beef Up Your Recipes with Beef SaltHow To:BeEF+Ettercap:Pwning MarriageHow To:Take Pictures Through a Victim's Webcam with BeEFHow To:Hack web browsers with BeEFHow To:Why You Should Start Eating Raw Meat (Or Eat More of It)How To:Make Perfectly Sized, Uniform Patties for Sliders & Mini Burgers Without Getting Your Hands DirtyHow To:Butcher a beef carcassNews:Top 10 Beef-less Burgers in LAHow To:Make Bourbon-Spiked ChiliNews:Homeless Terminator Goes Postal on AppleHow To:Cook a Yankee chuck beef pot roast with red wine