Bettercap + BeEF-XSS + msfvenomPayload Approach (Educational Purpose)

This video going to shows you guys how to use these 3 tools to compromise a windows machine when visiting a legit website.
First, we use bettercap to perform arp poisoning to route all the traffic from target host to attacker host (MITM). Then inject BeEF hook.js script into any website the target browsed to hook the target browser. Now we going to perform social engineering attack to popup a fake notification to trick the user install adobe flash plugin which will download our msfvenom payload & capture our shell. Check out the video to see how does it works.
Tools Used:
Bettercap:
-http proxy used to inject BeEF hook.js
-ARP Poisoning between target host & gateway
BeEF-XSS Framework:
-hosting malicious hook.js to hook the browser
-perform social engineering on hooked browser to trick the target to click on it
msfvenom:
-generate a payload that trick the user to execute it

[@greyburns6170]

This may have worked years ago but all modern browsers will not let you even get hooked. The ssl strip no longer works all it does is give the target a clear message that there is tampering with the connection.

[@zenoth_]

Great 👌

[@greyburns6170]

Great tutorial but plz find a modern method of actual ssl stripping.

[@bettaslab]

It’s very good but, these are old attacks already. And Abdobe flash is already expired. All antiviruses can detect this attack as well.

[@kaungpyaenaung9622]

making in android web browser doesn't work! android network stuck when i spoof.target on android phone IP.How can i solve sir.

[@grandmakisses9973]

Hey man do you have the discord

[@oussama8180]

NICE 🖤

[@sucuklulurabiye]

bro it will work on external network

[@NobodyAtall]

Beef hook.js would works just fine on public network.

[@wanderingknight10]

What terminal are you using?

[@NobodyAtall]

Im using the default kali terminal here

[@neilslater877]

I have xfinity and I'm getting notifications that it's blocking every http website connection because it's suspiscious. Are there bypasses that are known to work?

[@NobodyAtall]

May i know the blocking is occuring on the router side or ISP side. If it's on the router side, maybe there's a rules that'll deny http connection, try to modify the rule. If it's on the ISP side & they're using DNS way to detect http sites, try changing the DNS server see does that works or not.

[@neilslater877]

@@NobodyAtall so I just ended up completely turning off firewall on the router and target machine and still to no luck so I think the problem is elsewhere. I enabled ip forwarding and everything but I still can't connect to anything on my target machine. I ran arp -a and I can see the gateway mac changing but that's it hmm. This happens as soon as I turn on arp.spoof

[@neilslater877]

@@NobodyAtall only thing I can do is make google searches lmao. Like some websites work but it doesn't even pop up in betternet only queries made through google.

[@NobodyAtall]

Im sorry pal, it seems that this one is under the ISP side blocking. I don't think i might be able to help ya in this case.

[@peafowlplay8781]

will it work for Windows 10 & windows 10 pro ??? or it works only in Windows 7 ??

[@NobodyAtall]

This should works for most of the desktop os as I'm exploiting the arp table by sending tons of arp reply packet to perform MITM, & use hook.js to hook the browser session. What in showing here is just a demo in windows 7.

[@unknownn1642]

hi friend nice video , i have and some issue to gain hook client after done all this process even i check with http aor msn-com but there is no beef session let me know if you done any setting in browser for it regards.....

[@NobodyAtall]

I didn't done any additional settings in the browser pal, just keep it the default settings

[@unknownn1642]

@@NobodyAtall thanks friend , but still this issue after alot of attempts what you suggest for me , all bettercap is running commands well but not showing after brower open even all http webs.

[@NobodyAtall]

Probably you can check with wireshark, see you've perform a mitm to the target successfully already(checking the arp replies packet)? Did you captured the packets that the target sending or receiving?

[@unknownn1642]

@@NobodyAtall thanks my dear friend let me check i will reply after check...

[@williamsonrobert6354]

NOT WORKING PLZ HELP

[@NobodyAtall]

What's the error that you're facing right now?

[@williamsonrobert6354]

@@NobodyAtall No Error Everything Loads and executed successfully But victim is browsing safely

[@NobodyAtall]

not all of the websites you will be able to inject the BeEF JS using bettercap. It will works on HTTP or misconfigured HTTPS websites only. Misconfigured HTTPS websites can be downgraded to HTTP using sslstrip.

[@instabeast8645]

@@NobodyAtall all done get the beefinjection all seems ok but no hook on beef