Browser exploitation with BeEF

BeEF is a powerful tool that exploits web and browser-based vulnerabilities such as client-side and XSS attacks. With BeEF you can put up a link that when a user clicks on it, it will hook that user's browsers into the frameworks server. From there you can run malware on the hooked browser's IP address and use it to invade another host on the same network, dispersing the malware effectively.

When you launch BeEF from Kali Linux, the default credentials for both the username and password is beef:

Browser hijacking

The goal with BeEF is to hook a browser. We'll need a victim's browser to visit a vulnerable website. The hooked browser then communicates to commands sent from the BeEF server. Then the hooked browser will make the reverse connection to the server of BeEF and we would have full control over the victim's computer. Look for a JavaScript file named hook.js, as you will need to get the victim to execute it in a vulnerable web application. Once it's hooked...