mirror of
https://github.com/beefproject/beef
synced 2026-06-08 13:15:56 +00:00
Page:
Module: Get Visited Domains
Pages
ActiveRecord
Architecture
Autorun Rule Engine
Basics
BeEF Console
BeEF RESTful API
BeEF Testing
BeEF modules
Browser & OS Compatibility
Command Module API
Command Module Config
Configuration
Creating An Extension
Database Schema
Development Organization
Docker Setup
FAQ
Fetch_Port_Scanner
Form Data Types
Geolocation
Home
How BeEF Works
Information Gathering
Installation
Interface
Introducing BeEF
Javascript API
Linksys WRT54G2 CSRF
MAC OSX installation using RVM
Metasploit
Milestones
Module Creation Steps
Module Creation
Module Start Recording Audio
Module: 3COM OfficeConnect Command Execution
Module: AJAX Fingerprint
Module: ActiveX Command Execution
Module: Alert Dialog
Module: AlienVault OSSIM 3.1 XSS
Module: Asmax AR 804gu Command Execution
Module: Autocomplete Theft
Module: BT Home Hub CSRF
Module: Beep
Module: Bindshell (POSIX)
Module: Bindshell (Windows)
Module: Check connection
Module: Cisco Collaboration Server 5 XSS
Module: Cisco E2400 CSRF
Module: Clickjacking
Module: Clippy
Module: ColdFusion Directory Traversal Exploit
Module: Comtrend CT 5367 CSRF
Module: Comtrend CT 5624 CSRF
Module: Confirm Close Tab
Module: Create Alert Dialog
Module: Create Foreground iFrame
Module: Create Invisible Iframe
Module: Create Pop Under
Module: Create Prompt Dialog
Module: Cross Site Printing (XSP)
Module: D Link DIR 615 Password Wipe
Module: D Link DSL500T CSRF
Module: DNS Enumeration
Module: DNS Tunnel
Module: Deface Web Page
Module: Detect CUPS
Module: Detect Extensions
Module: Detect Firebug
Module: Detect Google Desktop
Module: Detect LastPass
Module: Detect PhoneGap
Module: Detect Popup Blocker
Module: Detect Social Networks
Module: Detect Software
Module: Detect TOR
Module: Detect Unsafe ActiveX
Module: Detect Visited URL
Module: Dlink DCS series CSRF
Module: Execute On Tab
Module: Fake Evernote Web Clipper Login
Module: Fake Flash Update
Module: Fake LastPass
Module: Fake Notification Bar (Chrome)
Module: Fake Notification Bar (FF)
Module: Fake Notification Bar (IE)
Module: Fake Notification Bar
Module: Fingerprint Network
Module: Geolocation
Module: Get All Cookies
Module: Get Clipboard
Module: Get Cookie
Module: Get Geolocation
Module: Get Internal IP (Java)
Module: Get Internal IP WebRTC
Module: Get Local Storage
Module: Get Page HTML
Module: Get Page Links
Module: Get Protocol Handlers
Module: Get Registry Keys
Module: Get Session Storage
Module: Get Stored Credentials
Module: Get System Info (Java)
Module: Get Visited Domains
Module: Get Wireless Keys
Module: GlassFish WAR Upload XSRF
Module: Google Phishing
Module: Grab Google Contacts
Module: Hook Default Browser
Module: Huawei SmartAX MT880 CSRF
Module: IMAP
Module: IRC NAT Pinning
Module: IRC
Module: Inject BeEF
Module: Java Payload
Module: Jboss 6.0.0M1 JMX Deploy Exploit
Module: Lcamtuf Download
Module: Link Rewrite (Clicked Event)
Module: Link Rewrite (HTTPS)
Module: Link Rewrite (TEL)
Module: Link Rewrite
Module: Linksys BEFSR41 CSRF
Module: Linksys WRT54G CSRF
Module: Linksys WVC series CSRF
Module: List Files
Module: Local File Theft
Module: Make Telephone Call
Module: Man In The Browser
Module: Netgear GS108T CSRF
Module: Persist resume
Module: Persistence
Module: Ping Sweep (FF)
Module: Ping Sweep (Java)
Module: Ping Sweep
Module: Play Sound
Module: Port Scanner
Module: Pretty Theft
Module: Raw Javascript
Module: Redirect Browser (Rickroll)
Module: Redirect Browser (iFrame)
Module: Redirect Browser
Module: Replace Component (Deface)
Module: Replace Videos
Module: Return Ascii Chars
Module: Safari Launch App
Module: Screenshot
Module: Send Gvoice SMS
Module: Serendipity = 1.1.1 Add User CSRF
Module: Simple Hijacker
Module: Spring Framework Malicious Jar Exploit
Module: Start Recording Audio
Module: Stop Recording Audio
Module: TabNabbing
Module: Test Network Request
Module: Test Returning Results
Module: Unhook
Module: Upload File
Module: VTiger CRM Upload Exploit
Module: Virgin Superhub CSRF
Module: Webcam
Module: Windows Mail Client DoS
Module: Zenoss 3.2.1 Add User CSRF
Module: Zenoss 3.2.1 Daemon CSRF
Module: boastMachine 3.1 Add User CSRF
Module: browser fingerprint
Module: detect bitdefender2012
Module: detect office
Module: iFrame Event Key Logger
Module: iFrame Sniffer
Module: iOS Address Bar Spoofing
Network Discovery
Notifications
Other
Persistence
Postman
Proxy and requester extension
References
Release Notes
RuboCop
Script: Java 1.6.0u27 mass pwner
Social Engineering
Troubleshooting
Tunneling
Using BeEF With NGROK
WebRTC Extension
XSS Rays
Clone
Table of Contents
Summary
- Objective: This module will retrieve rapid history extraction through non-destructive cache timing.Based on work done at http://lcamtuf.coredump.cx/cachetime/
- Date: March 2012
- Author: keith_lee
- Browsers: Firefox / IE
- Code
Internal Working
This module uses a trick discovered by Michal Zalewski in 2012 to detect if the browser have visited a given domain by abusing the browser's cache : the module load a javascript (for Firefox) or a picture (for IE) and look the response time. If the response time is very short, the file was probably already in browser's cache and it is thus not the first visit of the domain.
The module embeds a list of Javascript and Image file for different domains (see here. As this list was done by Michal Zalewski in early 2012, it may have changed and thus rendering this module less accurate.
Feedback
References
I - Starting BeEF
II - Basic Utilization
- Configuration
- Interface
- Information Gathering
- Social Engineering
- Network Discovery
- Metasploit
- Tunneling
- XSS Rays
- Persistence
- Creating a Module
- Geolocation
- Using-BeEF-With-NGROK
III - Advanced Utilization
IV - Development
- Contributing
- ActiveRecord
- Development Organization
- Architecture
- BeEF Javascript API
- Step By Step Module Creation
- Creating a New Extension
- BeEF Testing
- Browser & OS Compatibility
- Database Schema
- Development Milestones
- Command Module Config
- Command Module API
V - References
User Guide
I. Introduction | II. Basic Utilization | III. Advanced Utilization | IV. Development | V. References