Collaborate Disseminate
So I have a project, where I need to use BeEF XSS to hook my target’s browser(s).
The problem is, even when the API is running, and the poisoned page is running, and the script src is in the poisoned page; it doesn’t hook.
Have you ever been too busy to attend to the proper cooking of a steak? Well, lament no more, and warn your cardiologist. A trio of students from Cornell University have designed and built the steak-grilling BeefBot to make your delicious dinner dreams a reality.
[Jonah Mittler], [Kelsey Nedd], and [Martin Herrera] — electrical and computer engineering students — are the ones you should thank for this robot-chef. It works as follows: after skewering the steak onto the robot’s prongs, BeefBot lowers it onto the grill and monitors the internal temperature in a way that only the well-seasoned grillmaster can …read more
APT33 targets petrochemical, aerospace and energy sector firms based in U.S., Saudi Arabia and South Korea with destructive malware linked to StoneDrill. Continue reading Iranian APT33 Targets US Firms with Destructive Malware
i use Advanced Demo (butcher) BeEF-XSS
Butcher index.html
how Can I Separate web handler Server (Hosting) For My website and BeEF Server (VPS) in The Advance Model
And I Need To Hide My VPS as a result i can’t write in index… Continue reading Use BeEF Stealth
If a phishing email came through with a link to a website hosting BeEF (or another such framework) what would be the Indicators of Compromise for such an attack.
Additionally, if systems were compromised what would be the be… Continue reading BeEF – What are the Indicators of Compromise (IOC)
If a phishing email came through with a link to a website hosting BeEF (or another such framework) what would be the Indicators of Compromise for such an attack.
Additionally, if systems were compromised what would be the be… Continue reading BeEF – What are the Indicators of Compromise (IOC)
I was not sure if I should ask this on stackoverflow or not, but in the end decided here. Does anybody know of any alternative/equivalent tool like BeEF (Browser Exploitation Framework), that is programmed for NodeJs?
I have … Continue reading BeEF (PHP) – NodeJs alternative
I use the Autorun Rule Engine (ARE) in BEEF to run some some targeted modules upon being hooked and this works great, but how about if I want to run two separate campaigns? Those sent to webpage A get one set of Autorun Rule… Continue reading Beef on Multiple Campaigns
Is it possible the run BeEF (Browser Exploitation Framework) on the WAN through a VPN? IF so, how would I modify to config.yaml file? I assume I would need to open some ports on my VPN service, however the service I use (nVPN.net) won’t … Continue reading BeEF Server over VPN
I’m not sure if I discovered a possible bug. I already reported to Bettercap’s staff on their Bettercap’s Github but as you can see on that link, it seems the problem is not on Bettercap’s side. Maybe is a BeEF bug or I am missing something… that’s what I try to identify. Let’s see if some experienced user can throw light on this.
The problem is long to explain, so I’ll summarize it a lot and if you want all details (versions of operating systems, version of Bettercap and BeEF, etc), you can check the link I wrote down above.
The problem is I get an error trying to entering to the BeEF ui control panel: "ERROR: invalid username or password". At first sight you can think is a silly user/pass error but the user and password are ok (defaults beef/beef). The problem only happens if I activate the ui panel IP restriction and Bettercap.
There is an access restriction to BeEF ui control panel that can be done in BeEF config file. By default is: permitted_ui_subnet: "0.0.0.0/0" but I want to restrict it to permitted_ui_subnet: "127.0.0.1/32"
The BeEF config file is ok. If I launch it, it works, even with the ui panel IP restriction. As I said the problem only happens with Bettercap and activating the ui panel IP restriction. Some test results:
"ERROR: invalid username or password"It happens on different Linux, with different ruby versions, etc… even tested with default BeEF config only changing the ui panel IP restriction, so I think is not a BeEF config issue.
The questions are: Has somebody experienced something like this? Am I doing something wrong? If some user can test this, could be very nice! I mean Bettercap + BeEF with ui panel IP restriction activated and try to log with default credentials. Thank you.
EDIT I already opened an issue on BeEF’s github. Will see what happens: https://github.com/beefproject/beef/issues/1337
EDIT2 The conflicting Bettercap part is the proxy. If I launch Bettercap withou proxy, there is no problem, but I don’t understand why because I launch proxy for Bettercap on port 8080 and I looked for http requests on BeEF login and all shown are on port 3000 which is not related… and of course there is no iptables involved in the process, so it makes no sense… I tried to launch Bettercap’s proxy in other port different than 8080. I tried using 26210 trying to avoid possible port conflict, but same unsuccessful result.
Continue reading Restriction to ui panel on BeEF+Bettercap generates error login