BeEF (Browser Exploitation Framework)

In this time, I will show the step how using BeEF (Browser Exploitation Framework). for more details about BeEF please visit here

- The first, open BeEF tools on Backtrack to activate.
Start menu => Apps => Exploitation => Social Exploitation => BEEF XSS Framework => BeEF

See on above, address http://127.0.0.1:3000 is a hook address, this can allows us to ensnare target if opened by browser of target. But, in here I not explain how to hook the target so execute hook address, maybe the next post I will explain it.

Then put the address on any script and make to javascript syntax, in here I use f******k script. 

Then open the hook address on target browser, this assumed the target was hooked by us.

Open panel BeEF on our browser (On Backtrack)

In panel, you can see what browser or process are runnng from the target. On above we can see on left bar, the target was detected Online browser.

Afterthat, double click on address then set allert dialog like below

Then klik Execute.

See on browser target, what happen ??

The browser was exploitation...