provocativo_
back to the arsenal
// arsenal·ExploitationIntermediateFOSS

BeEF (Browser Exploitation Framework)

Hooks browsers via JS payloads and exposes a control panel for post-XSS modules.

Exploitation

$ beef-(browser-exploitation-framework) --help

BeEF (Browser Exploitation Framework)

// what it is

Description

Wade Alcorn's framework demonstrates exactly how much an attacker can do once a single browser is XSS'd: webcam access, keystroke capture, fingerprinting, social-engineering popups, network pivoting.

// use cases

What people use it for

  • Demonstrate post-XSS impact
  • Social-engineering payloads

// commands

The commands you'll type

Start BeEF

$ ./beef

// facts

category
Exploitation
platforms
LIN · MAC
license
FOSS
difficulty
Intermediate

// related in Exploitation