What is this?
BeEF (Browser Exploitation Framework) is a penetration testing tool that focuses on the web browser, letting a tester assess the real security posture of a target by using client-side attack vectors instead of network-perimeter exploits.
BeEF (Browser Exploitation Framework) is a penetration testing tool that focuses on the web browser, letting a tester assess the real security posture of a target by using client-side attack vectors instead of network-perimeter exploits.Is this a browser extension or a standalone server?It is a standalone Ruby-based server application. You run the 'beef' command to start it, and it hooks target browsers by having them load a JavaScript hook file, then you control those hooked browsers from BeEF's web console.
It is a standalone Ruby-based server application. You run the 'beef' command to start it, and it hooks target browsers by having them load a JavaScript hook file, then you control those hooked browsers from BeEF's web console.How do I get it running?Run the install script to install OS packages and the required Ruby gems, then execute the 'beef' command and follow the on-screen instructions.
Run the install script to install OS packages and the required Ruby gems, then execute the 'beef' command and follow the on-screen instructions.What do I need installed before running BeEF?You need Ruby 3.0+, SQLite 3.x, Node.js 10+, and the gems listed in the Gemfile; on macOS you also need Selenium via Homebrew ('brew install selenium-server-standalone').
You need Ruby 3.0+, SQLite 3.x, Node.js 10+, and the gems listed in the Gemfile; on macOS you also need Selenium via Homebrew ('brew install selenium-server-standalone').Does it run on Windows?No, Windows is explicitly not supported; only Mac OSX 10.5+ or a modern Linux distribution can run BeEF.
No, Windows is explicitly not supported; only Mac OSX 10.5+ or a modern Linux distribution can run BeEF.How do I attack a browser once I have BeEF running?You get a target browser to load the BeEF hook JavaScript file (the 'hook'); once hooked, the browser appears in BeEF's web console where you can launch command modules and further attacks against it.
You get a target browser to load the BeEF hook JavaScript file (the 'hook'); once hooked, the browser appears in BeEF's web console where you can launch command modules and further attacks against it.Why does it matter that BeEF looks at the browser instead of the network?The README argues that network perimeters and client systems can be hardened while the browser remains an open door, so BeEF targets that overlooked attack surface rather than duplicating traditional network-focused security tools.
The README argues that network perimeters and client systems can be hardened while the browser remains an open door, so BeEF targets that overlooked attack surface rather than duplicating traditional network-focused security tools.Where can I find detailed install and configuration steps?The project points to INSTALL.txt and the project wiki's Installation and Configuration pages for full setup and hardening details beyond the quick-start script.
The project points to INSTALL.txt and the project wiki's Installation and Configuration pages for full setup and hardening details beyond the quick-start script.What are similar projects?redamon, hacker-roadmap, Decepticon, metasploit-framework, PowerSploit, social-engineer-toolkit, evilginx2, nishang
redamon, hacker-roadmap, Decepticon, metasploit-framework, PowerSploit, social-engineer-toolkit, evilginx2, nishangWhich topics is it in?context, exploitation, pentest, website, exploit, hooks, hacking-tool, red-team, ruby, pentesting, penetration-testing, hacking
context, exploitation, pentest, website, exploit, hooks, hacking-tool, red-team, ruby, pentesting, penetration-testing, hacking