beefproject/beef — Issue #465: Modern browsers prevent BeEF from working properly
Author: passbe
Created: 2011-12-10 23:28:08+00:00
State: open

What steps will reproduce the problem?
1. Run BeEF on a local network
2. Inject the hook script into a webpage
3. Navigate to the page with victim browser

What is the expected output? What do you see instead?
The browser should be hooked into BeEF, however, the browser is not. Nothing shows up in logs, either.

What version/revision of the product are you using? On what browser? On
what operating system?
0.4.2.4-alpha on Debian Stable. Host browser is Firefox. All modern browsers tested with victim.

Please provide any additional information and screen shots below.
The script is in the pages, pointing to 172.16.1.69:3000. Wireshark reveals that the victim is communicating with the BeEF server, however when it sends the request to "/dh" there is no cookie specified, as is normally when hooked via the example page. This is most likely modern browsers blocking the cookie from being sent, however the exact same string that is in the cookie is in the request itself as "bh" but BeEF does not appear to look at that.
Google Code Issue: http://code.google.com/p/beef/issues/detail?id=339