Basic hacking concepts: Using BeEF to attack browsers

[@ANOM236]

It is a good video, I was looking for someone to explain how to do it with a created web page and no one explained, you did it in detail, you deserve more support

[@bulmavegeta23]

no pensaba en verlo por que dura media hora, después de haberlo visto me doy cuenta q casi me pierdo de este gran tutorial, muchísimas gracias por el tiempo q sr tomo en mostrarlo. Actualmente me encuentro estudiando metasploit, un tema muy interesante y extenso, vere si tiene algun video en su canal. Soy su nuevo suscriptor

[@joebonny7462]

how do i remove a hooked browser and will it leave files on my compputer if i hook my own browser

[@DFIRScience]

BeEF has the option to remove a hooked browser, and it should not leave files on your own computer.

[@richardjettson335]

You forgot the step where you add like 10 layers of proxies

[@deadlyscripteryt8933]

Eh one can do but you know what's a better vpn?? THATS RIGHT NORD VPN IS A GREAT VPN SERVICE-

[@MrRaja]

@@deadlyscripteryt8933 NordVPN doesn't care about your privacy... Mullvad does.

[@ronburgundy1033]

how can we use proxychains with beef ? whenever ever i tried to access the beef panel after ive run firefox with through proxychains it dose not allow me to use beef. im not exactly the most advanced user but learning.

[@justinjayarajk1465]

bro i liked the video very much please help us to improve our knowledge as now you are doing. thank you.

[@DFIRScience]

Glad you liked it! Let me know if you have any other topics you'd like to see.

[@suzerain3880]

I have a question, how do you exit from config.yaml after configuration??

[@DFIRScience]

If you are in nano you can press ctrl+o then enter to save then ctrl+x to exit. vim esc then :x enter to save and exit.

[@confidential303]

Great introduction! Now I do better understand how the hacks is taken place, but on the same note, how do I know or assess that I am full proof of these kind of attacks? It would be interesting to see with 2 browsers or one with antivirus on and one without ..to demonstrate if the atttack is successfull or a fail. I myself am interested in security ..but I just dont trust even the standard tools provided by kali linux..what if there is a malware in it which will turn against you? Now I know it is open source , but just the idea, you want to have a clean system which you can wipe out easily so nothing stays permanent.

[@DFIRScience]

Hello. I'm glad it was helpful for you. Your question "how do I know or assess that I am full proof of these kind of attacks?" Most of the time, you don't know. It either fails because the browser protected from the attack, or it was successful and you likely won't notice anything. You can install additional security software or configure your system to log more, but detection usually means monitoring your logs/software.

[@kingstonejolly8408]

i am not sure but its been 2 days while i am using video chat for online classes somethings happens to my computer my mouse is moving and some short of coding was done i am not sure if it was coding or else could pls help me how to stay secure

[@lesiostasio2542]

Wdym by coding?

[@engjellbakiasi742]

my beef doesn't open ,it says can't co-operate because of system d can you help

[@mhasisetuobelho2086]

You deserve more likes and subs 😁😀😁😀

[@hmar8719]

hello how are you can you show me how to install kali linux on virtual box? I have been having a hard time trying to use it on virtual box please

[@SleeplessSwan7]

What do the 'Gmail logout interval' and 'Redirect delay' exactly do? From what I understand is that usually there's a delay when redirected to another website, but I'm not sure why do we need that when executing this exploit.

[@y47anjeager55]

How did u make a website to attack ??

[@TheGentlemanGR]

You mentioned internal network. Should I put my VMs networks attached to Internal Network , Vat or Bridge ?

[@DFIRScience]

If you have other test VMs you could do a "host only network" test. What I was referring to is your own home/lab local network. Obviously, something that you have permission to test on.

[@fletchmeister8671]

Love your logo 👍🏻

[@CyberSecForce]

Your voice is great 👍.. congrats

[@DFIRScience]

Thanks for listening

[@kikinit999]

Very good video. You really take time to explain and i appreciate that ty.

[@Drakanudo]

Great video! I have a few questions, what happens when the user shut down the computer? lets say someone uses Social Engineering Toolkit to get an infected PDF, pass it on to me, I open it and the hacker gets a shell into my system and 5 min later Iturn off the pc. Once I turn it on the control persists or these types of attacks die if I disconnect my pc somehow?

[@DFIRScience]

It depends on the payload. The one shown does NOT persist. Usually, once an attacker gets access to a system they attempt to get persistence first in case the user restarts the system.

[@Drakanudo]

@@DFIRScience thanks 🙏🏻

[@Pirateking513]

hello sir ... could you please mail me the procedure for creating web server in kali linux please

[@waltonplays1413]

Service apache2 start

[@masterblackarmy10000]

is there a way like to keep the browser hooked even if they close it like and when they re open a new one they appear online again some kind of start up like what botnets have?

[@DFIRScience]

That's called "gaining persistence." That would require some sort of browser vulnerability or social engineering to let you run code locally outside of the protections in the browser. Basically exploit a vulnerability in the browser to install software or change configurations. It's going to be a bit more advanced that BeEF alone. Check out Ethical Hacking: A Hands-on Introduction to Breaking In (amzn.to/35fG3Ri)

[@nicatshare6103]

24:13 second How can I change my logo?

[@mareklorincz531]

hey bro, thank for really helpful video, but i have a problem. i run it on linux terminal (that should be ok, i think) but everytime when i try to run it, it show theese problems: [i] GeoIP database is missing [i] Run geoipupdate to download / update Maxmind GeoIP database and this problem: System has not been booted with systemd as init system (PID 1). Can't operate. Failed to connect to bus: Host is down thank for any help

[@DFIRScience]

GeoIP database missing is not really a problem. If you have a license you can try to fix it with these instructions: dev.maxmind.com/geoip/updating-databases?lang=en The second seems like a problem with your Linux install. As long as BeEF runs, then you can probably ignore it.

[@yuslainsane4830]

bro it's all fine but how do I exit beef?

[@pino5302]

My link is not working I can only hoor myself and if I test om my other pc the link wont work

[@DFIRScience]

Yeah, this example can hook locally. Also, most modern browsers will detect and try to stop these attacks now. It can work, but there is a lot more to do to get it to work on a public network.

[@ItsDylan0710]

can it work?

[@KonsulIT]

can running in container like docker?

[@DFIRScience]

Yeah, no problem. It normally runs on Linux.

[@thekomike6304]

Interesting tutorial

[@DFIRScience]

Thank you.

[@guidoschultzz]

Does the social engineering tool kit pdf malware works on phones ?

[@DFIRScience]

The technique will but the payload likely will not.

[@miguelalfaro1196]

Muy buen video Jhosua, ¿Aplica para todos los navegadores? muchas gracias.

[@DFIRScience]

Cada navegador tiene diferentes ataques técnicos. Todos los navegadores pueden ser atacados por "ingeniería social". Each browser has different technical attacks. All browsers can be attacked by "social engineering".

[@miguelalfaro1196]

ok muchas gracias, Jhosua.

[@lynxtouch]

How can you test BeEF on a computer on another network? I tried viewing the website with the JS hook on my actual laptop rather than a VM and it wouldn't open

[@bilelbenamor5915]

same for me

[@nelsonalvarez5311]

You have to start a web server and do a port forwarding on your router configuration to the IP address of the machine running the server. If you use a VM then it should be in bridged mode

[@abood-po1lc]

I don't get it .. like if i want to hack someone on the Internet should I use my local ip or my Internet ip? How does this ip thing works in real hacking scenario...

[@plaguedriver]

it's just an address for a computer on your network. If you don't understand how IP addresses work, then you should be looking up some videos on computer science instead of hacking robux.

[@abood-po1lc]

@@plaguedriver thanks for the advice... I have already started taking EC Council's CEH courses since month ago.. now I have basic understanding of networking and IP addressees..

[@kahebtowjrbtb8715]

@@abood-po1lc obviously not lmao

[@bibogrille5472]

how you sent the test file to windows

[@DFIRScience]

You host the file on a web-accessible server and send the target a link.

[@shockd6235]

Hello dude can you tell me why when i send the link to my friend he cannot open it on browser any solution

[@DFIRScience]

Everything I did in this video was on my own network using my local network IP addresses. Your local network addresses are not usually accessible from the internet. If you want to send a link to your friend, you will have to use a publicly accessible server to host your sites.

[@shockd6235]

@@DFIRScience can you do a video how to do it please

[@richardjettson335]

Did they ever fix that issue where you can get hacked on KZbin by watching a hacking video?

[@lesiostasio2542]

Never heard of that

[@LT-Shadow]

HOW TO TURN ON BEEF

[@dl5244]

Are there some browsers that (by default) are immune to this exploit? I notice you used an old version of IE, but what about the latest Chrome, etc?

[@dl5244]

You answered my question in the last minute! TYVM

[@DFIRScience]

haha! Great! I hope it was useful.

[@DDBAA24]

How vulnerable are extensions , they have access to everything .. Its the perfect type of software to target its already mining all of the data for you, they couldn't exist if they didn't. We give Permission to these extensions , blindly. I'm sure there is some toolkit out there , I'm assuming that why people sometimes get paid so much $ for bugs. The data is so much more valuable then the money , when it can be sold thousands of times over. Just felt like saying this because all extensions are really intrusive and probably evil.

[@kikinit999]

very good point

[@SecurityTalent]

Thanks

[@galanxotv]

video would have been 10 minutes, needs lots of clippings. Hope recent clips have little words and much info

[@hypocz6968]

and the ip address must be my machine lets say i put gibberish into it some random numbers will it work?

[@DFIRScience]

The test server is running on your local computer, so you need to use your computer's IP address. Basically you need target to connect to your server. Random numbers won't work.

[@hypocz6968]

@@DFIRScience Okay thanks!

[@ItsDylan0710]

can it work on phone

[@ZainAli-rz4cu]

No

[@ItsDylan0710]

@@ZainAli-rz4cu okay

[@bloodbone5043]

when I try to ping it times out

[@mihaiioc.3809]

for me too , maybe is because the ping is made on the pc's main os and the virtual box connects the virtual machine to a local made network connection , if you look in the machine it says the connection is wired even if you have it on wi-fi , and so if you don't ling it from the same network it doesn't work , it could be that but i didn't try to see if that's the problem

[@rabihandari1637]

dude the actual link is so suspicious how can you change it ?

[@DFIRScience]

You would need to register a domain and host a server at that domain that you could redirect clients to.

[@d_o_o_m_e_d5939]

Or DNS spoofing

[@johnnybpena]

Try the tool MaskPhish

[@ahsan-li7sh]

great one

[@DFIRScience]

ahsan habib Thanks a lot.

[@khateziahpelobello2768]

Nice

[@rao613sachin.]

I want to learn hacking. Please 🙏 someone help me

[@angelcauilan5521]

❤

[@cameron6803]

stolen?

[@DFIRScience]

What do you mean?

[@endoftime0]

But what if he leaves the website immediately? Who in hell would stay on the website after seing this

[@DFIRScience]

You would inject/embed the code into a site with content that someone may stay on for a long time, like social media or movie streaming service. From here, a lot of attacks could be automated, so you wouldn't need much time to get some interesting information or other persistence. Think of this as a quick first step in the attack chain.

[@cdbcbd4930]

7mins ++(ish) why koreans?

[@alexmartin5920]

😂😂😂😂😂

[@Koreayoutuber]

13:47 한국일보? ㅋㅋㅋㅋ

[@mr.gamerchannel2970]

please sir tell me how to make a legit link

[@Mrserag1]

totally useless ... you are demonstrating on an ancient browser