admin/beefproject-beef
1
0
Fork 0
mirror of https://github.com/beefproject/beef synced 2026-06-08 13:15:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
Page: BeEF Console
Pages
ActiveRecord Architecture Autorun Rule Engine Basics BeEF Console BeEF RESTful API BeEF Testing BeEF modules Browser & OS Compatibility Command Module API Command Module Config Configuration Creating An Extension Database Schema Development Organization Docker Setup FAQ Fetch_Port_Scanner Form Data Types Geolocation Home How BeEF Works Information Gathering Installation Interface Introducing BeEF Javascript API Linksys WRT54G2 CSRF MAC OSX installation using RVM Metasploit Milestones Module Creation Steps Module Creation Module Start Recording Audio Module: 3COM OfficeConnect Command Execution Module: AJAX Fingerprint Module: ActiveX Command Execution Module: Alert Dialog Module: AlienVault OSSIM 3.1 XSS Module: Asmax AR 804gu Command Execution Module: Autocomplete Theft Module: BT Home Hub CSRF Module: Beep Module: Bindshell (POSIX) Module: Bindshell (Windows) Module: Check connection Module: Cisco Collaboration Server 5 XSS Module: Cisco E2400 CSRF Module: Clickjacking Module: Clippy Module: ColdFusion Directory Traversal Exploit Module: Comtrend CT 5367 CSRF Module: Comtrend CT 5624 CSRF Module: Confirm Close Tab Module: Create Alert Dialog Module: Create Foreground iFrame Module: Create Invisible Iframe Module: Create Pop Under Module: Create Prompt Dialog Module: Cross Site Printing (XSP) Module: D Link DIR 615 Password Wipe Module: D Link DSL500T CSRF Module: DNS Enumeration Module: DNS Tunnel Module: Deface Web Page Module: Detect CUPS Module: Detect Extensions Module: Detect Firebug Module: Detect Google Desktop Module: Detect LastPass Module: Detect PhoneGap Module: Detect Popup Blocker Module: Detect Social Networks Module: Detect Software Module: Detect TOR Module: Detect Unsafe ActiveX Module: Detect Visited URL Module: Dlink DCS series CSRF Module: Execute On Tab Module: Fake Evernote Web Clipper Login Module: Fake Flash Update Module: Fake LastPass Module: Fake Notification Bar (Chrome) Module: Fake Notification Bar (FF) Module: Fake Notification Bar (IE) Module: Fake Notification Bar Module: Fingerprint Network Module: Geolocation Module: Get All Cookies Module: Get Clipboard Module: Get Cookie Module: Get Geolocation Module: Get Internal IP (Java) Module: Get Internal IP WebRTC Module: Get Local Storage Module: Get Page HTML Module: Get Page Links Module: Get Protocol Handlers Module: Get Registry Keys Module: Get Session Storage Module: Get Stored Credentials Module: Get System Info (Java) Module: Get Visited Domains Module: Get Wireless Keys Module: GlassFish WAR Upload XSRF Module: Google Phishing Module: Grab Google Contacts Module: Hook Default Browser Module: Huawei SmartAX MT880 CSRF Module: IMAP Module: IRC NAT Pinning Module: IRC Module: Inject BeEF Module: Java Payload Module: Jboss 6.0.0M1 JMX Deploy Exploit Module: Lcamtuf Download Module: Link Rewrite (Clicked Event) Module: Link Rewrite (HTTPS) Module: Link Rewrite (TEL) Module: Link Rewrite Module: Linksys BEFSR41 CSRF Module: Linksys WRT54G CSRF Module: Linksys WVC series CSRF Module: List Files Module: Local File Theft Module: Make Telephone Call Module: Man In The Browser Module: Netgear GS108T CSRF Module: Persist resume Module: Persistence Module: Ping Sweep (FF) Module: Ping Sweep (Java) Module: Ping Sweep Module: Play Sound Module: Port Scanner Module: Pretty Theft Module: Raw Javascript Module: Redirect Browser (Rickroll) Module: Redirect Browser (iFrame) Module: Redirect Browser Module: Replace Component (Deface) Module: Replace Videos Module: Return Ascii Chars Module: Safari Launch App Module: Screenshot Module: Send Gvoice SMS Module: Serendipity = 1.1.1 Add User CSRF Module: Simple Hijacker Module: Spring Framework Malicious Jar Exploit Module: Start Recording Audio Module: Stop Recording Audio Module: TabNabbing Module: Test Network Request Module: Test Returning Results Module: Unhook Module: Upload File Module: VTiger CRM Upload Exploit Module: Virgin Superhub CSRF Module: Webcam Module: Windows Mail Client DoS Module: Zenoss 3.2.1 Add User CSRF Module: Zenoss 3.2.1 Daemon CSRF Module: boastMachine 3.1 Add User CSRF Module: browser fingerprint Module: detect bitdefender2012 Module: detect office Module: iFrame Event Key Logger Module: iFrame Sniffer Module: iOS Address Bar Spoofing Network Discovery Notifications Other Persistence Postman Proxy and requester extension References Release Notes RuboCop Script: Java 1.6.0u27 mass pwner Social Engineering Troubleshooting Tunneling Using BeEF With NGROK WebRTC Extension XSS Rays
Clone
7
BeEF Console
Jess Williams edited this page 2020-01-02 09:44:48 +10:00
Table of Contents

The console extension is currently disabled and unsupported, this page is kept for historical purposes only in the case that this is enabled again.

Introduction

BeEF includes a metasploit-like console. This console can be used to control hooked browsers and send modules.

Configuration

The BeEF console is an extension which should be enabled in the main config.yml file.

Utilization

The console is automatically launched with the beef script.

Help

Core Commands
=============

    Command       Description
    -------       -----------
    ?             Help menu
    back          Move back from the current context
    exit          Exit the console
    help          Help menu
    irb           Drops into an interactive Ruby environment
    jobs          Print jobs
    offline       List previously hooked browsers
    online        List online hooked browsers
    quit          Exit the console
    review        Target a particular previously hooked (offline) hooked browser
    show          Displays 'zombies' or 'browsers' or 'commands'. (For those who prefer the MSF way)
    target        Target a particular online hooked browser

Hooked browsers

BeEF > online

Currently hooked browsers within BeEF

Id  IP        Browser  OS
--  --        -------  --
6   10.1.1.1  C-21     Linux

BeEF > offline

Previously hooked browsers within BeEF

Id  IP        Browser  OS
--  --        -------  --
1   10.1.1.2  FF-15    Windows XP
[...]

Jobs

BeEF > jobs -l

Id  Job Name
--  --------
0   http_hook_server

Launch module

Select the target zombie:

BeEF > target 6

List available modules :

BeEF (10.1.1.1) [6] > commands

List command modules for this target
Id   Command                                               Status       Execute Count
--   -------                                               ------       -------------
1    Host/Hook_Default_Browser                             User Notify  0
2    Host/Detect_CUPS                                      Working      0
3    Host/Get_Clipboard                                    Not Working  0
4    Host/Get_Registry_Keys                                Not Working  0
5    Host/Get_Wireless_Keys                                User Notify  0
[...]

Select a module:

BeEF (10.1.1.1) [6] > select 66

See information on the module:

BeEF (10.1.1.1) [6] / Detect Google Desktop > cmdinfo
Module name: Detect Google Desktop
Module category: Host/
Module description: This module attempts to detect Google Desktop running on the default port 4664.

Launch the module:

BeEF (10.1.1.1) [6] / Detect Google Desktop > execute
[*] Command successfully queued
[13:21:24][*] Hooked browser [id:6, ip:10.1.1.1] has been sent instructions from command module 'Detect Google Desktop'

See response:

BeEF (10.1.1.1) [6] / Detect Google Desktop > response

List of responses for this command module:
Id  Executed Time     Response Time
--  -------------     -------------
48  2012-10-15 13:18  2012-10-15 13:19:04 +0200
51  2012-10-15 13:21  2012-10-15 13:21:29 +0200

BeEF (10.1.1.1) [6] / Detect Google Desktop > response 51
Results retrieved: 2012-10-15 13:21:29 +0200

Response:
google_desktop=Not Installed

Notifications | Module creation

I - Starting BeEF

  1. Introducing BeEF
  2. Installation
  3. Basics
  4. Troubleshooting

II - Basic Utilization

  1. Configuration
  2. Interface
  3. Information Gathering
  4. Social Engineering
  5. Network Discovery
  6. Metasploit
  7. Tunneling
  8. XSS Rays
  9. Persistence
  10. Creating a Module
  11. Geolocation
  12. Using-BeEF-With-NGROK

III - Advanced Utilization

  1. RESTful API
  2. Autorun Rule Engine
  3. Notifications
  4. Console
  5. WebRTC Extension

IV - Development

  1. Contributing
  2. ActiveRecord
  3. Development Organization
  4. Architecture
  5. BeEF Javascript API
  6. Step By Step Module Creation
  7. Creating a New Extension
  8. BeEF Testing
  9. Browser & OS Compatibility
  10. Database Schema
  11. Development Milestones
  12. Command Module Config
  13. Command Module API

V - References

  1. FAQ
  2. Other
  3. References
  4. Modules
  5. Release Notes

User Guide

I. Introduction   |   II. Basic Utilization   |   III. Advanced Utilization   |   IV. Development   |   V. References

Community

Blog   |   Code   |   Youtube   |   Twitter