How to Use beEF (Browser Exploitation Framework) « Null Byte :: WonderHowTo

I'm still amazed by all the things some people justdon'tknow. Script-kiddies often refer to Metasploit if someone asks them how to hack a computer because they think there's simply no other way. Well here I am today trying to increase your set of tools and -of course- skills.What is beEF?beEF is the Browser Exploitation Framework and is a Open-source penetration testing tool that focuses on browser-based vulnerabilities. That means that beEF is extremely useful for Social engineers with "fake" website's. This tool is of course also useful for anyone who "need's" it.Getting started...First thing you'll need is Linux. And after that you will need to install the beEF software which is foundhere.You also might have it already installed. It can be found here:After that you'r ready to use beEFStep 1: Starting beEF.Go ahead and start beEF. It'll show something like this:The selected link is the link you should use to connect to you'r beEF UI. But it should open a browser session automatically. The username and password are beef.Step 2: What's Next?Now we need someone to connect to our link. This can be done using the easy, or the hard method. I'm going to focus on the easy one. You just need to send the link from beef to someone. Don't forget to shorten the URL. You'll need the "Hook-URL."Then you'll get a screen similar to this:You can clearly see that a browser is connected and is online!A Few Final Tips & Info>If you don't know how to shorten an URL, just use google.>If you'r not sure that beEF is working correctly, open up you'r browser and enter:http://127.0.0.1:3000/demos/basic.html. this should be the result:What are we able to do know?Well, we can send certain commands to the victim. Also we get every info there is available about him/her so that's pretty pro. Right!?Please comment, give kudos and follow me for more amazing tutorials._Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Got Beef? Getting Started with BeEFHow To:Hack web browsers with BeEFHow To:Hack Web Browsers with BeEF to Control Webcams, Phish for Credentials & MoreHow To:BeEF - the Browser Exploitation Framework Project OVER WANHow to Hack Like a Pro:Getting Started with MetasploitHow To:BeEF+Ettercap:Pwning MarriageHow To:Use BeEF and JavaScript for ReconnaissanceHack Like a Pro:How to Get Facebook Credentials Without Hacking FacebookHow To:Take Pictures Through a Victim's Webcam with BeEFHack Like a Pro:Exploring the Inner Architecture of MetasploitHack Like a Pro:How to Hack Facebook (Same-Origin Policy)Hack Like a Pro:How to Exploit and Gain Remote Access to PCs Running Windows XPHow To:Hook Web Browsers with MITMf and BeEFExploiting XSS with BeEF:Part 2Hack Like a Pro:Getting Started with BackTrack, Your New Hacking SystemHow To:Center Your Pixel XL's Status Bar Clock, iPhone-StyleHow To:Attack on Stack [Part 4]; Smash the Stack Visualization: Prologue to Exploitation Chronicles, GDB on the Battlefield.How To:Pull Italian Beef for Italian Beef SandwichMac for Hackers:How to Install the Metasploit FrameworkExploiting XSS with BeEF:Part 1News:Top 10 Beef-less Burgers in LAHow To:Make Bourbon-Spiked ChiliHow To:Use FunFx, a Ruby-based testing framework for Flex