security enabled verified high v1.0.0

beef

Browser Exploitation Framework for assessing browser security through client-side attack vectors and hooking.

📋 Live Preview 
beef -x config.yaml
beef -x config.yaml

Sandbox: execFile · Timeout: 600s

Capabilities

browser.exploitation
browser.attack
browser.hooking
credential.harvesting

Parameters

Name Type Required Default Description Aliases
flag-x string No - Config file path -x, --config
flag-p integer No - Bind port -p, --port
flag-H string No - Bind host/address -H, --host
flag-P string No - Admin UI password -P, --password
flag-c string No - Command to execute -c, --cmd
flag-d boolean No - Debug mode -d, --debug
flag-v boolean No - Verbose output -v, --verbose
flag-s boolean No - Enable SSL -s, --ssl
flag-D boolean No - Daemonize (run in background) -D, --daemon
flag-l string No - Log file path -l, --log
flag-ui integer No - UI server port --ui, --ui-port
flag-ui-host string No - UI server bind address --ui-host
r boolean No - Enable RESTful API -r, --restful

Contract

Inputs

network.url

Hook URL to serve to target

Outputs

browser.session

Hooked browser session

credential.data

Harvested credentials

Side effects: network_trafficprocess_spawn

Workflow Edges

Produces

browser.sessioncredential.data

Consumes

network.url

Resource Profile

ResourceValue
CPUmedium
Memory128 MB
Networkmedium
Disk I/Olow

Examples

Start BeEF with default config

beef -x config.yaml

Start BeEF on custom port

beef -x config.yaml -p 8080

Start BeEF with SSL enabled

beef -x config.yaml -s -p 443

Start BeEF daemonized

beef -x config.yaml -D

Start BeEF with custom UI port

beef -x config.yaml --ui 8081

Start BeEF in debug mode

beef -x config.yaml -d -v

Start BeEF on specific interface

beef -x config.yaml -H 10.0.0.1 -p 3000

Documentation

BeEF — Browser Exploitation Framework

BeEF (Browser Exploitation Framework) is a penetration testing tool focused on web browsers. It uses a client-side attack vector to assess browser security by hooking one or more browsers and using them as beachheads for launching further attacks.

Key Capabilities

  • Browser hooking: Hook target browsers via injected JavaScript
  • Module system: Hundreds of modules for reconnaissance, exploitation, and persistence
  • Command chain: Execute commands across hooked browsers
  • Tunneling: Proxy traffic through hooked browsers to bypass network controls
  • Metasploit integration: Pass hooked browser sessions to Metasploit

Architecture

BeEF consists of:

  • Server: Ruby-based C2 server with RESTful API
  • UI: Web-based administration panel
  • Hook: JavaScript payload delivered to target browsers
  • Modules: Extensible module framework for browser attacks

Related Tools

metasploitempiresetoolkit

References