@beefproject

BeEF is pioneering techniques that provide practical client side attack vectors. Created & led by @WadeAlcorn. Tweets by dev team.

beefproject.com
Joined November 2010
  • Tweets1.1K
  • Following16
  • Followers21.7K
29Media
Here is a list of 100 tools that an ethical hacker should know about: Nmap Metasploit Framework Wireshark John the Ripper Aircrack-ng Hydra Burp Suite SQLMap Nessus Nikto Cain and Abel THC Hydra THC SSL DoS Maltego Netcat OpenVAS Social Engineering Toolkit (SET) BeEF DirBuster W3af GDB OllyDbg Immunity Debugger IDA Pro Ghidra Fuzzing tools (e.g., AFL, Peach, Sulley) YARA Radare2 Frida DNSenum Fierce The Harvester OSINT Framework Recon-ng SpiderFoot Shodan Skipfish ZAP (Zed Attack Proxy) sqlninja Malwarebytes Sandboxie Snort Bro OSSEC Syslog-ng Splunk ELK stack Logstash Kibana Wazuh OpenVPN WireGuard IPsec Tor I2P Tails Qubes OS Whonix Parrot OS Kali Linux BlackArch Linux BackBox Samurai Web Testing Framework OWASP ZAP OWASP Juice Shop DVWA (Damn Vulnerable Web App) Metasploitable WebGoat OWASP Mutillidae II bWAPP (buggy Web APPlication) OWASP Broken Web Applications Project OWASP Honeypot Project Glastopf Honeyd Amun HoneyDrive Kippo Cowrie L0phtCrack THC PPTP Bruter Medusa THC IP6 Attack Toolkit THC IPv6 Toolkit THC SIP Digest Leak Tester THC Hydra IPv6 THC Amap SSLyze tlsenum sslscan Responder ettercap WiFite airgeddon Fluxion Ghost Phisher wifiphisher EvilAPDefender Phishing Frenzy SETOOLKIT Veil-Framework
57
375
8
1,269
182,664
Bought some bargain hacker stickers for next con sticker swap. 😂
4
12
124
13,310
A DOM XSS vulnerability in Gartner's Peer Insights Widget affected the sites of Gradle, LogRhythm, SentinelOne, Synopsys, Veeam, Vodafone and more. Details of the bug, the patch, the bypass, and the final patch are up at gartner.com.ring0.lol/
5
34
2
117
25,757
I was playing for a few hours with the old @beefproject which I remember using almost a decade back for my Metasploit Megaprimers. Was shocked to see most attacks still work quite predictably on all modern browsers with endpoint security solutions running!
4
4
20
BeEF retweeted
jca@_j_ca18 Jul 2020
Most hilarious xss vector: Write & publish a book with xss on the cover, then 0wn all the shopz!! @thornmaker @sirdarckcat @garethheyes
9
291
31
904
Since several ppl are wondering how to get #RCE via #XSS: you have several solutions such like exploit or when you want to pwn quickly and don't have a working exploit against activeX/JS core etc.. I often just use @beefproject, Linked to @metasploit it's *awesome* and useful++
WacoTaco@WacoTaco128 Nov 2019
Replying to @kmkz_security
How did you get rce from xss?
3
40
3
75
#protip from battlefield: Found Slack #API key and do not know what to do? Start @beefproject instance (or any browser payload) and use #API to invite users to go on your xmas-kdo.lol/companyname link to get free gifts. Don't forget to spoof user+send message on every chan ;)
6
13
Learning how to use @beefproject today. Cool stuff!
1
1
2
Blind XSS on a backend system hooked with BEeF over HTTPS. @beefproject is such an awesome tool. Thanks @WadeAlcorn @antisnatchor and others! <3
5
1
25
Evolution of BeEF (Browser Exploitation Framework Project) youtu.be/-Hec35g4zaU @beefproject #beef #python
8
1
18
Beef with code_injector makspostument.com/2019/03/be… @beefproject #Beef #Python #Scapy #Hacking
3
6
Day 4 in @SANSPenTest #SEC542 class at #SANSFire is almost 1/2 way done. It is my favorite day of XSS, XXE, and AJAX. Working with @beefproject later after lunch. So much fun. So much impact! <script> alert(" #WishingYouWereHere ") </script>
1
3
20
So, LuckyMouse used @metasploit's shikata_ga_nai to obfuscate the payload & @beefproject to infect NDC. I thought shikata_ga_nai is detected by most AV's, I believe they tweaked it before using. It'd great anyone provide the malware sample.
1
4
1
10
BeEF used by an APT... // cc @antisnatchor securelist.com/luckymouse-hi…
1
20
1
31
Replying to @steelrattus
Any traffic sent over unecrypted channels is vulnerable to manipulation. This could include injecting things such as spyware (ask Iran), cryptojacking or even @beefproject hooks. Not mention if you have any login form, these could be changed to point to spoofed login forms.
1
5
Could be a nice BeEF script @beefproject xitter.cf/x0rz/status/9361933281…
x0rz@x0rz30 Nov 2017
That is so sneaky... The Windows API shouldn't let visible windows goes beyond user noticeable limits. #cybercrime #cryptominers
6
9
Running @beefproject in Docker thanks to ilyaglow: hub.docker.com/r/ilyaglow/be…
2
4
Replying to @showthread @NathOnSecurity @beefproject
Most services take a cut - CoinHive is no different. Their cut is 30% as per their homepage.
1
BeEF now supports Monero mining with Coinhive JavaScript Miner @beefproject github.com/beefproject/beef/…

Add Coinhive Miner module by bcoles · Pull Request #1454 · beefproject/beef

This PR adds a Coinhive JavaScript Miner module.

github.com
1
36
3
38
Interesting chart from @Mcafee_Labs September threat report. VBS / HTA is 100x more common than PowerShell. And they all drop EXEs anyways.
5
85
1
80
Load more