virusz Posted October 12, 2009 Report Posted October 12, 2009 BeEF is a browser exploitation framework. This tool will demonstrate the collecting of zombie browsers and browser vulnerabilities in real-time. It provides a command and control interface which facilitates the targeting of individual or groups of zombie browsers.Enhancements in the latest version include: * Integration with Metasploit via XMLRPC * Mozilla extension exploitation support * New browser functionality detection modules * Tiered logging for module actions and resultsScreen:+http://www.bindshell.net/tools/beef/screenshots/autopwn.pngBeEF provides an easily integratable framework that demonstrates the impact of browser and Cross-site Scripting issues in real-time. Development has focused on creating a modular framework. This has made module development a very quick and simple process. Current modules include metasploit, port scanning, keylogging, TOR detection and more.------------------InstallStandardStandard Install Instructions * Extract the BeEF tar file to the webroot * Check BeEF directory permissions and ownership of BeEF directories and files * Open a browser and connect to http://beefsite/beef/ o Follow install instructionsBackTrackBackTrack Install InstructionsSet ServerNameEdit ServerName in '/usr/local/apache/conf/httpd.conf'. * ServerName <your domain/IP>Extract BeEF to HTTP Server * cp beef-v*.tgz /usr/local/apache/htdocs * cd /usr/local/apache/htdocs * tar xzvf beef-v*.tgzSetup BeEF from Browser * Browse to http://<your domain/IP>/beef/ * Follow Instructions * Click 'Finished'Verifying InstallUse a browser to connect to 'http://beefsite/beef/hook/example.php'. Now a zombie will appear in the zombie section of the BeEF UI.After a zombie has connected, select the 'alert' module. Enter an 'Alert String' and click send. Now check the target browser and you will see that an alert dialog box is shown.------------------------------------------------------------------------------------Video: NTLM Challenge Credential Theft with BeEF and Metasploit on VimeoExecuting Browser AutoPWN Through BeEF on VimeoUpgrading BeEF in Samurai WTF on Vimeo--------------------------Download: http://www.bindshell.net/tools/beef/beef-latest.tar.gzHomepage: BindShell.Net: BeEF Quote
