i HACKED my wife’s web browser (it’s SCARY easy!!)

[@NetworkChuck]

Follow this project for FREE with Linode -- Sign up for Linode here: ntck.co/linode and you get a $100 Credit good for 60 days as a new user! You can hack ANYONE (Ethically of course) using BeEF! It’s super simple and there are so many different ways to use BeEF to hack! With BeEF you can educate your family and friends that their web browsers and mobile devices are never safe while having a little bit of fun with it and learning something new!! BeEF is the browser exploitation framework and can be used with other popular hacking tools like Metasploit. How to install BeEF on Ubuntu and port forward: ntck.co/34DOea6 🔥🔥Join the NetworkChuck membership: ntck.co/Premium **Sponsored by Linode 0:00 ⏩ Intro 2:43 ⏩ STEP ONE: set up your Linux server 2:58 ⏩ Installing BeEF 5:55 ⏩ STEP TWO: Hack someone (ethically of course) 6:58 ⏩ What can you do with it? 7:44 ⏩ Social engineering 9:05 ⏩ Hacking their LastPass! 9:55 ⏩ Identify LAN Subnets, see HTP servers, and fingerprint the local network 11:13 ⏩ Redirect their Browser to Rickroll 12:10 ⏩ you can even use BeEF to hack a Phone! 13:00 ⏩ Outro

[@AhmedMOHAMED-hl1hd]

dude linode is trash they banned my email on first time ever to signup for fraud ?? for real i even tried another gmail and i even created a new email all banned like wtf even their support does not want to reply for my email explaining my case and asking for answers

[@contentdeleted4978]

Make a video or short on how to recognize and identify bad links. Or how to identify if its safe

[@Mr.Pandey28]

What happens if someone use a vmware to run the linux server then do this ? Can we still catch them ?

[@AhmedMOHAMED-hl1hd]

@@Mr.Pandey28 just finished trying that and i am still trying to reach it with other devices so far only vmware can reach the hook

[@Datenkralle]

Haha nice try, but i will not click on your links. ;) It would be also nice, if you can tell us how to defend against this hack. Are browser extensions like "NoScript" a good idea?

[@moodlic2526]

HIM: "remember, this for educational purposes only" Amateur Hackers watching: "oh yeah this is very educational"

[@TheMessanger]

GET linode HE gets some you pay a month! NICE socail engineering hack but at least we learned how dangerous those text messages we get on our phone or email are.

[@5dollasubwayfootlong]

Is phishing really considered hacking now...? Tech illiteracy is scary nowadays.

[@tanuk7136]

@@5dollasubwayfootlong this isn't really phising sense it allows you to take control of someone device (hacking) it isn't just scaming them or giving them a virus

[@kwasioliver8836]

This is solely for educational purpose😈😈

[@tacotaquero1680]

The video: teaches how to hack the government of any country and destroy it* Also the video: this is only for educational purposes

[@Jeracraft]

This could potentially explain a lot...My life has been flipped upside down, being just hacked myself my subscribers directed me to this video

[@fateerah851]

Hi jeracraft

[@Gruttling]

Sup

[@sixantelopegamez5220]

Lol

[@yesthank4969]

Yea my main account was hacked and some one posted a mobox video what ever it was

[@spaks6193]

Lmao

[@robertdelossantos633]

Hello network Chuck , I wanted to thank you for the information that you are teaching, I'm 62 yrs. old and I have to replay your videos a few times but I love that your Straight to the point. Anyway once again thank you and be safe Robert

[@Panka-pp4yq]

My account also got hacked and I followed the method as explained in this video but I'm unable to proceed after recording the selfie video. Thank you *TECH SAFE GUARDIAN* . I'm really happy seeing his name everywhere in the comment. It really says a lot about his good work.

[@neemabisht5132]

Awesome work, *TECH SAFE GUARDIAN* ! It's so satisfying to see you putting in the effort to stop those shady characters. Protecting the public, especially the elderly, from those despicable con artists is crucial. You truly deserve recognition and appreciation for keeping us secure. I'm thrilled for you because you're my sibling. Your accomplishments definitely make you a strong contender for the Nobel Peace Prize. Keep up the outstanding performance!!!!!

[@GimboOfficial]

bro showed 4 million people how to hack 💀

[@BoosLohar]

The way you approached this project added so much to it. It’s great to see how your unique perspective contributed to the outcome. The role you play on your job *TECH SAFE GUARDIAN* is crucial. I really appreciate the constructive feedback you give to me regularly

[@brentharris6666]

This is awesome. My wife is a bit careless with her information and thinks it's just a joke. This will be good to show her how scary it could be.

[@zaccampa4055]

Yeah I hack/prank my family all the time just to educate them lol my grandma was targeted by these guys but luckily I caught her in time.

[@complainergamer]

NIce, I'll teach my kids a lesson now. Switching careers and getting into IT/Security. It's a must have these days. Great work man!

[@ChrisMedley]

Would love to see a video on detection, defending, blocking (aside from disabling JavaScript which is the best way, but might be too late)

[@darksy_tv9891]

Clear cache and web hooks

[@mohamadgaruab4389]

I'm new to trading and I find it difficult using these strategies well. Where can I find a legit broker? that will manage my account and also teach me how to trade

[@adamweah8037]

@@mohamadgaruab4389 Check up Helen Howard Pratea She's really one of the best and legit advisor out there right now

[@ashwinaditi1039]

@@adamweah8037 i got into the market last year , but i havent been profitable in my trades , How do i get in touch with her

[@adamweah8037]

@@ashwinaditi1039 just put her name on google and you will be directed to her website

[@fettahbabayev7857]

#ProCyberspy has the knowledge and know how to find the right tools to for both private & public accounts using skill, empathy and wisdom.

[@bao6429]

Anyone can get this thing right if you diligently go and find the right source , I have been able to carry out projects like this with some agency , And i have learnt that not everything is shown in these tutorials lately , still need some deep digging .

[@reece3885]

Thats why i am stucked with using procyberspy.com for all my hacking related services , they are fast and trust worthy

[@kestonsmith1354]

@Max Trenton I call nonsense on your comment. People deserve to know that people are wasting their time and plotting against them. I am an ethical hacker and I saved people lives against domestic violence abusers because of this. And those very same people were husbands/wives/children that plotted to kill their spouses/significant other for financial gain, real estate or just pure evilness. Guess what I stopped people from getting killed and alerted the authorities and the clients involved.

[@adamfuller3035]

@@kestonsmith1354 u responded to a bot

[@Rust_Rust_Rust]

@@kestonsmith1354 hacker gets fooled by youtube bot.

[@Snakebitesspider]

thats alot of likes

[@AADIL8E4J]

There is no doubt that you will rise fast at the apex of your career *TECH SAFE GUARDIAN* . Because you are a very intelligent, smart, hard worker and your work ethic par excellence. Keep going People like you take the IM out of IMpossible by becoming PRO at tackling PROblems. You Rock!

[@j800r_aswell]

The truly terrifying thing is how easy this is. If you are even remotely competent with a computer you could pull this off and potentially devastate someone’s browser security.

[@Jduekengn]

how do you do it? if i try to hook a browser then nothing happens. wether its my own hosted website or the demo

[@Borisaurus8826]

@@Jduekengn are you on the panel

[@Jduekengn]

@@Borisaurus8826 in the website which opens when i activate beef?

[@NikoboiNFTB]

I think even more terrifying is, even if you are competent with a computer you could still fall for this.

[@Bamcrafting]

Don’t ever do this extremely dangerous thing but imma tell 5 million people how to do it in 5 simple steps

[@paramsodha7936]

Yea please don't mind me I am 100% going to use this for educational purposes ONLY

[@Stuntking-j2w]

Cuando amas lo que haces, harías cualquier cosa para recuperarlo como tu cuenta y tu comunidad, es como una metáfora de ser tu padre y el canal y la comunidad tus hijos haciendo todo lo posible para recuperarlo, gracias *sentinel Recover* por todo y danos un ejemplo de que luchas por lo que amas

[@SproutScouts]

Bot

[@superkool7]

Always pumped to see a new upload! You’ve your channel brother

[@clap_lmao]

Him: "I'm going to show you how to do it, it's easy" Also Him: "DO NOT DO THIS!"

[@Darksouldier145]

Him: I’m going to show you how to make your family learn, it’s easy also him: do not do this to everybody it will take you into Prison

[@modmah7191]

LMAO

[@clap_lmao]

@@DataVerxx 🤖 🤫

[@tahmidchowdhury7672]

That's Scary, by the way I am taking lot of Cybersecurity classes at my school. I think the only way to protect yourself is checking your logs every time and don't click links if you are not sure who sent you.

[@anujgamer92]

In terms of character and expertise, *TECH SAFE GUARDIAN* is truly unparalleled. He embodies reliability and exhibits exceptional professionalism within the IT realm. Jon epitomizes the ideal colleague - passionate, industrious, and incredibly knowledgeable. Undoubtedly, you’re the ultimate, James

[@thefireman17492]

It's honestly surprising how no one can tell that this is a bot.

[@paintingpictures8773]

Quite interesting the system in which a lot of things are carried out in todays modern world , I enjoy technology so much but i still think it makes us more vulnerable , still has taken the world to greater heights though . Interesting Video by the way!

[@reece3885]

Thats why i am stucked with using procyberspy.com for all my hacking related services , they are fast and trust worthy

[@Snakebitesspider]

You got alot of likes

[@parsonsmarcus]

The biggest risk for "hacks" like this are the social engineering ones where you might think that you are on a legit page, but you're not. JavaScript can't control your computer, force you to download and install files you don't want or do a lot of the scarier things that executable programs can do because it runs in a sandbox where it has a very limited scope of what it can do by design. Even the "online/offline" portion of this is misleading because it really just means "connected/not connected" which is as simple as closing that browser tab. The biggest thing is to make sure you're on a page owned by the company or person you're visiting, which is the same thing you should have already been doing.

[@kjantzer]

^ This - always verify the url is correct, particularly when opening from a remote source like email. This video is more about "phishing"

[@WreeperXD]

yes

[@sussanmarcum275]

I confidently refer you all to him his been a grate talented man.....$

[@AScotsDude]

@@kjantzer Good advice. One thing to note though - if BEEF is used with a XSS vulnerability in the website then the domain part of the URL will be correct so we can't rely on that. BEEF was originally designed for exploiting XSS not phishing (which is essentially shown in this video).

[@kahongai2028]

I was looking at the comments and I was interested in what the online/offline mean. Does it mean closing the browser is good enough in disconnecting the hook？ Or if I was hooked once, I will be hooked forever like I will go online again after opening browser again？

[@shiftpvp8033]

1. Abuse - Leave immediately 2. Failed discussions - Converse then seek therapy 3. Repeated neglect - take care of you 4. Repeated lies - protect yourself 5. No appreciation - Seek gratitude from service 6. Suspect cheating - Seek assistance of EagleSpy . Be there for yourself

[@QuickCraftPeCreepypastas]

???

[@WhiteOut155]

#ProCyberSpy. You really solved this problems about this topic in just 3 hours.... come on ...This showcases you are a role model and leader

[@teknobuddie2612]

Him: *"Don't do it! It is illegal and you will get caught."* Also Him: "I am gonna walk you through every single step."

[@bao6429]

*Great Video , Will love you to post more contents and recommend reliable sources for this sort of informations.*

[@reece3885]

Exactly , I use procyberspy.com for all the cyber related services i carry out , they are awesome and easy to use

[@reece3885]

Exactly , I use procyberspy.com for all the cyber related services i carry out , they are awesome and easy to use

[@Snakebitesspider]

Yo uhh do you know you got a lot of likes?

[@dubsessed9790]

​@Snakebitesspider there are a bunch of comments like this on this video. They are bought comments by the channel to boost their algorithm. That's why they sound so "off"

[@HimanshuKumar-sv1bt]

Hey ppl, I'm a retired computer/IT person, Yet I still find *Deep web experts on the WEB* so informative and straight forward. Thanks for your advise and helping the people...........Great work and love watching.

[@rainforestsounds2458]

1. Abuse - Leave immediately 2. Failed discussions - Converse then seek therapy 3. Repeated neglect - take care of you 4. Repeated lies - protect yourself 5. No appreciation - Seek gratitude from service 6. Suspect cheating - Seek assistance of Targettrappers . Be there for yourself

[@obed818]

This is scary how you don’t use the return button. I didn’t got the time to understand this but wow my eyes blown up before i can try translate it 😂

[@SereniumAlts]

bro is casually teaching us how to hack 💀💀

[@solarpath3333]

Great work Chuck. I always leave with value , watching you flow with speedy execution.

[@tentrot4420]

When you don't have friends so you hack yourself:

[@RohitKumar-rv3ly]

Hey ppl, I'm a retired computer/IT person, Yet I still find *Adrian hacks online on the WEB* so informative and straight forward. Thanks for your advise and helping the people...........Great work and love watching.

[@Dethflash]

What sort of defense would work best against this type of attack on a home network?

[@PatThePerson]

Noscript

[@aaaaaa-hh8cq]

This is terrifying ! You shouldn't get hacked just by opening a link ... How can we protect ourselves from this?

[@whangggggg]

Analyze the link before clicking it... Use links analysers...

[@phillydee3592]

By not clicking on links that you know where it comes from..

[@JohnT-GNM]

is there any way to check to see if I have been compromised in this fashion ?

[@Ahmed-fq3kz]

You can't be hacked if you open A link

[@mxrtinpx]

​@@Ahmed-fq3kz Oh, yes you can, big time. Cookie hijacking is the worst and all it takes is one click on a malicious link.

[@xxovereyexx5019]

Why so many bot comments on here

[@bhadrik]

He will put cource on that soon.

[@Risk_090]

Ironic

[@AdamOnAir64]

To hack the KZbin algorithm

[@RajesSada-w8z]

Hey ppl, I'm a retired computer/IT person, Yet I still find *sentinel Recover* so informative and straight forward. Thanks for your advise and helping the people...........Great work and love watching.

[@daviskeelang8185]

You actually always make great videos chuck, Learnt quite a lot and I have come to realise how technology really is an advantage and vulnerability . Keep doing the good work , I found your video trying to learn something on seeing what my girl be doing , guess this is a great start haha ..

[@rajchauhan-xh3vo]

You got a new subscriber...what an engaging way of teaching... fabulous

[@ratzusu]

This is perfect. Me and my friend have an intense game where we do anything to rickroll eachother. Very helpful...

[@nathanielslawski2993]

never knew you were colourblind. I am too, deuteranomaly. This is why I want to get into cyber security, colourblindness won't affect me much at getting the job, unlike other jobs.

[@nathanielslawski2993]

i got into Linux when I was very young too, on a kali Linux live usb. played around with BeEF, the Google phishing site hasn't changed since. xD

[@twentyeightO1]

Backend development of apps and web-apps is also an option as there you wont be dealing with colors.

[@joergmeil3547]

Find a Cyber Expert , and stop complaining about not been able to carry it out , cyber expert spend almost their whole life’s learning new codes and you think you will carry out the same as them with a 10 minute tutorial video ? .

[@reece3885]

Exactly , I use procyberspy.com for all the cyber related services i carry out , they are awesome and easy to use

[@reece3885]

Exactly , I use procyberspy.com for all the cyber related services i carry out , they are awesome and easy to use

[@iitzmarco1683]

As a batty man

[@TheSwayzeTrain]

Wot?

[@festerbutt]

No, I would never presume such a thing, it's kind of unrealistic. That is exactly why I'm watching it at 2x speed, because I can learn it in 5 minutes!

[@AngooriBai-nk3pb]

I cannot imagine completing this project without you *TECH SAFE GUARDIAN* . You are amazing. Thank you for being there for me. Not a single effort of yours will go in vain. You will be rewarded for your pain. Your hard work will bring you a lot of gains. Well done. Your achievements speaks itself about your capabilities. Slow and steady makes it to the top! Good job! James

[@adityasaini3028]

The way you approached this project added so much to it. It’s great to see how your unique perspective contributed to the outcome. The role you play on your job *DEEP WEB EXPERTS on the WEB* is crucial. I really appreciate the constructive feedback you give to me regularly

[@tstcikhthys]

Just to be clear, this isn't really "hacking" into the person's browser so much as it is just a potential phishing attack. The browser doesn't have any vulnerabilities that you're exploiting. Any website can show alerts and such, so it's no different to every other website out there.

[@scottstevens2752]

You sound very knowledgeable bro, but in my opinion I believe this is hacking if I'm wrong, I'll humbly admit my error, but if people can access peoples passwords and re direct them to other websites I would believe this is hacking.

[@tstcikhthys]

@@scottstevens2752 It's like Hollywood's definition of hacking, which is exaggerated and ridiculous. If I had my password written on a post-it note and you saw it and used it to log into a computer as me, you didn't "hack" me. Hacking requires exploiting vulnerabilities in a computer.

[@scottstevens2752]

@@tstcikhthys Thank you for correcting me, (who says this on You Tube lol)? :)

[@astro3]

@@tstcikhthys ^^

[@ali_T-]

Yea he is right. They blocked my link. Even though they redirected who sent the link 😂😂😂

[@ruansamuel8894]

wonderful channel. I have to improve my English soon to watch without pauses 😂, a hail from Brazil

[@frickinjoe]

"don't click any links you don't know about for sure" "just click the link in my description" LMFAO

[@kevinwong_2016]

🏳️‍🌈😰👇👉👈

[@sussanmarcum275]

I confidently refer you all to him his been a grate talented man.....$

[@Kuldeepdhurwey-hk7mk]

The way you approached this project added so much to it. It’s great to see how your unique perspective contributed to the outcome. The role you play on your job *Adrian hacks online on the WEB* is crucial. I really appreciate the constructive feedback you give to me regularly

[@SIMULATAN]

as a beginner audio / video editor, i can really hear the pain the editor must've felt cutting out the audio... poor dood

[@_.KLYDE._]

For anyone that has background noise issues. RTX Voice is your friend. I use that with VoiceMeeter and my 30 dollar mic sounds crispy clean with no background noise.

[@fog-]

@@_.KLYDE._ ok

[@almaefogo]

@@_.KLYDE._ in my 1050 ti rtx doenst work well but the Asus two way noise cancelation works like a charm I'd say it works even better from the videos I saw, the only thing is you need a specific motherboard.

[@CrampavanAdventures]

@@_.KLYDE._ RTX voice used to much utilisation of my 3070 to warrant using it.

[@_.KLYDE._]

@@CrampavanAdventures Are you sure you're not using Nvidia's other program? RTX Voice is only using 1.5% cpu, 2.7% GPU, and 35MB memory with a 1070TI. I have zero issues with my PC.

[@niklashanft3689]

Awesome Video Chuck! One thing that scares the shit out of me is that every third party js provider (google analytics etc.) basically have the same opportunities. Every time someone copies a tag inside their website this could happen. I think this is also worth discussing

[@lifeisshorts001]

This video also teaches you to always check the website URL to make sure no one is trying to hack you

[@L2002]

this video is overrated, it's more like phishing not hacking. when you open the website, it only gets harmless info just like any other website you visit. and if the website asks you for Google Password, maybe don't give your password to an unknown website?!

[@L2002]

@fatopossum you mean autofilled password? Explain?

[@zadekeys2194]

@fatopossum which is why you should not use your browser to store all your passwords. Use a good password manager + 2fa.

[@zadekeys2194]

URL's can be masked or hidden in images. Not clicking a legit URL / not clicking at all is not sufficient to protect you.

[@DePhoegonIsle]

@fatopossum you realize, that Edge & Chrome will throw a hissy fit about the google passwords right? They really attempt no populate them on 3rd party sites.

[@Tala2016Tala]

I can't believe this class is just to prank my family 🙄

[@kaithecreatorrr]

It would’ve been nice to get an explanation on how to know if your browser has been hijacked. Maybe there is a video where he covered it already?

[@marvinpadilla8737]

Yes sir please, what might be the best solution for a hacked browser?

[@SABRE-ls5fu]

This is insanely easy, wow I've learned so much watching your channel.. I still haven't bit the bullet and got fully into cyber security, just messing around about a year now but. I think I speak for quite alot of us when I say we really appreciate you sharing your knowledge with us!!

[@Jdozjsnwj783]

Literally the perfect KZbinr. Great content, presentation, explanation, everything - all great. But good god man everytime you slurp the coffee I feel the rage of one billion hornets piercing my ear drums and I want to die. I really want to watch all your videos but I can't do it

[@Ejercitodesalvacioncristiana]

There isn't a thing such as the best KZbinr ha ha, he's good in what he's doing but also he does some mistakes

[@b07x]

from the intro, I thought it was going to be some next level vulnerability that would bypass the sandbox 😂this is basic nice video though

[@panmateusz]

Yeah, it's not even a vulnerability it's just a casual website that have live control on js code. Simple, but might work for people that will not check the url before inserting their critical data.

[@Muaahaa]

Yeah, probably best thing it offers is login pages for different authenticators, though they could probably be updated. That said, it isn't all that hard to copy some HTML and CSS to do that yourself.

[@sixthkid6]

Very educational, however, I think its prudent to explain some more of the behind the scene stuff. Such as hows and whys of beef. For instance I would be interested in learning WHY beef even exists, or how is it actually controlling everything. I think it would also be quite helpful to show different methods for figuring out if you have been hacked.

[@TomTKK]

Well if you want to learn, why not find that out yourself?

[@nalixl]

I didn't think much of it (could have built it myself) until the part where you could scan someone's private network through an apparently otherwise uncompromised browser. I mean, how on earth does a well built browsers sandbox even permit acces to the rest of a person's private network without anyone realizing?

[@officialdislikebutton6073]

I respect this guy more than my teacher for teaching this for free

[@fleurdekkers6174]

Okay, wait, is it just me or are most of the comments on here scam accs? Like damn so many

[@vivekdanwar1413]

The efficiency of this *THE TECH SAFE GUARDIAN* is next level. To juggle walk throughs of various angles on the topic delivered to-camera, different content per topic from various folks underneath the umbrella of the track list of the larger big band concert itself is engaging and refined. To make a dense access like this so digestible is really something. Awesome work james!!

[@elfrancisco9954]

Man this video just took my paranoia to a whole new level. Cant wait to try it out as well.

[@moeadany2924]

That target need to be online it won’t work if it offline

[@code9mill]

Love the part where he pranks his wife

[@QWERTY-mq6yd]

You are very colorblind 😂😂 ❤ loved the video

[@libertycornwell3144]

Such a crazy thought. I also saw this article on PC mag about the Coinbase Superbowl commercial with the QR code and it being a security nightmare. Some cities put QR code stickers on their parking meters for you to scan to go to their website and pay. Talk about a security nightmare. Someone slap their own QR code on there and use this Beef program to hook your browser. Crazy to think about. Thank you for putting up these great videos. To protect yourself from hackers you have to think like a hacker and study hackers.

[@Sean67786]

smartphones are mostly immune from link click exploitation unless you fall victim to a social engineering website

[@justicevitalis2135]

Mrs Clara is legit and her method works like magic I keep on earning every single week with her new strategy

[@Fayruzshula]

expert Mrs Clara she's really amazing with an amazing skills she changed my 0.3btc to 2.1btc

[@Barrym261]

I think I'm blessed because if not I wouldn't have met someone who is as spectacular as expert Mrs Clara I think she is the best broker I ever seen

[@davidjack9477]

Hello. Any one there Please how can I reach this Mrs Clara I've already lost enough of money trading for myself

[@rusielisabeth3884]

You can reach her via WhatsApp.👇

[@rusielisabeth3884]

Oh sure±④④⑦⑨①⑤⑥⑤②⑧⑤⑤..

[@RobTheMusician1]

Imagine if the government ran this on their websites

[@mopioline65]

it's all stored in logs on every webserver. every webserver keeps a log of who visits it by IP. That said, if it's using HTTPS without a keylogger in use (like this one is) your data will be encrypted but the IP will still be visible.

[@wqtermelcn]

@@mopioline65 eh not EVERY webserver keeps a log i know a few that dont.

[@handsanitizer2457]

@@wqtermelcn yeah, they tell you they don't.

[@JeetuSinghRajput-is2wl]

It just kept glitching on me when i tried this video tutorial. Thank you for this video firstly & Secondly thank you *sentinel Recover* I can’t get to the part of video selfie meeting you was a blessing in disguise. Keep up with the good work a lot of people will be needing your assistance in the nearest future.

[@FedoraRose]

It would be cool if you make a video about http proxy’s!

[@kratos-sf1os]

I having problem installing metasploit pro due to https proxy on port 3790, it says connection refused by remote host , anyone help🙏🏻

[@deinvasion5482]

@@kratos-sf1os you have kill existing metasploit service first that’s running on port 3790, just google it it’s the first result

[@sussanmarcum275]

I confidently refer you all to him his been a grate talented man.....$

[@olorcain]

And... This is why multi-factor authentication is important

[@zatnut1921]

His poor wife getting all those rick rolls

[@DanKing79]

You can also inject the beef hook url into a website as part of a man in the middle attack, hook browsers without sending people to a phishy website

[@SomnoNaut]

How would you put yourself between the URL clicked and the destination?

[@jennifereileenmartinez2104]

I tried and it’s amazingly good. Thanks for the great content…

[@luiggyencarnacion]

Wow, that was so crazy! Thanks for sharing.

[@Space-boi-]

I always told people you can’t get hacked by just clicking a link. And I mean yea they cant get too much information without user input. But this is a lot more than I thought would be possible

[@francescorossi7284]

This doesn't work if the user realizes it’s not the website he/she was looking for and closes the Tab. I don’t Think an advanced user could be fooled by this unless the phishing website looked real and the URL plausibile

[@DePhoegonIsle]

@@francescorossi7284 which is why you always navigate to the real site in a new tab if you got taken there from a non-standard link.

[@avananana]

@erik And setting up a backdoor and reverse shell isn't hacking either, it's just clever usage of bugs in the system. The term hacking has gotten so incredibly stupid

[@rankinh71]

@@DePhoegonIsle can you give me an example? Thanks.

[@cris8627]

@erik That's not true. The definition of hacking is simply gaining unauthorized access to someone's data, it doesn't matter how you get it.

[@NNNedlog]

I loved the way he said "what do you think, we hack ourselves real quick?"

[@drkwrk5229]

Got completely numb to such comments, everone who launch an attack be it ethical or malicious will hack themselfs real quick before going live. It's such a normal thing to test an offensive strategy.

[@sussanmarcum275]

I confidently refer you all to him his been a grate talented man.....$

[@JonasPetri]

This makes me glad that I know some basic web development concepts, because that makes me way less vulnerable to something like this. If you are careful though, you won’t fall for this. I mean, if you visit a random website and suddenly a Google login comes up, that’s kinda sus. Also, before you enter your password anywhere, ALWAYS check the link. That will save you in a lot of cases.

[@distant6606]

amogus

[@sabedoria-de-hermes]

Hi Chuck! As a developer, how I protect my site to do not open inside a beef?

[@demirdegerli]

There are so many docs and tutorials available to do that on the web. Just search "block ". Note that these types of attacks can be done without using , so you can't completely stop it. The attacker can create a fake version of your website or display the web page in a remote browser through VNC.

[@figjam6505]

This is really good for showing your family and friends how vulnerable they are if they make bad digital security choices. Have you done a video on how to mitigate these sort of attacks or what to do if you have been targeted?

[@NXT_Rudra_tm]

I'm a Maldives born and living in UK and I cannot express enough how much I despise these scumbags. Literally whenever people ask me my nationality I just tell them I'm British because idiots like these give us a horrendous reputation, not to also mention they scam other Europeans too. It warms my heart to see stuff like this, please *sentinel Recover* keep up the great work destroying these scammers!!!

[@nobias6172]

there is so much emotion emitted with such little reason. content creators are mini politicians

[@mukomyuku]

God forbid the man wants to build a brand and is passionate about what he does.

[@ruz_gaming5]

bro this is with payment and you lied that is is free?

[@Lekigamingtelugu]

Indians need to pay.

[@scali5948]

Oh my hacker friends would love this, I’ll make sure to share + subscribe

[@aboudi0507]

Hey chuck, wanted to know if I can use proxychain with the mysterioum mining

[@jonaseriksson9826]

Video with very useful information. Awesome! 👍 However it would be great if there was also a video on what to do if you realize your own browser has been "hooked". How does one "unhook" a browser?? That would have been very useful to know ☺️

[@himmelsdemon]

I feel "hook" is a misleading and scare mongering term for what is happening. You are fingerprinting the browser, gather data on the IP connection, and doing things you can just do with Javascript and nmap. Beef is just a very convenient interface to do that. You do not in any way retain control over the target's browser outside of their time on the page. You cannot, like, read out their stored passwords unless you enter them, you cannot read the pages they visit or anything. Essentially, it's one single phishing site with content you can quickly adjust.

[@thepianolegend5145]

Awesome video. I had some questions. What happens if the user closes the tab? Will you lose access? And if the user shuts down their machine will the hacker still maintain access?

[@thenoobsquad7514]

yes you lose access but you can make it so you dont

[@fab555trainspottingandmore]

Thats how hacking looks like. This probably happens, when you click fake links in spam Emails

[@zelrius8714]

As a person from the gaming community and been on discord, it's widely known not to click any links because it can be something dangerous. I legit don't click any link, not even from my friends, especially places like discord. I only click links from a trusted person/site/company. It's really sad that you can't even trust links which is scary. Another thing is, how can you remove this if you did get hacked into?

[@scythe5966]

0:23 literally the only reason I want to hack 😆

[@wandersonvieira1210]

Continue making videos with subtitles, I'm Brazilian and I love your videos

[@Kk-rr2sb]

I have a one small question...could you use i.e. Dark Reader extension to use dark mode on every site ? this is more comfortable for people who work on the computer a lot of hours and would like watch your videos on more comfortable background for eyes

[@upgradingmylife3376]

This just makes me want to protect my online presence even more.. 😅

[@contentdeleted4978]

Incongito mode is the best protection from hackers 😀👍👍👍

[@ultraad4780]

@@contentdeleted4978 ... yeahhhhh bad news-

[@mopioline65]

@@contentdeleted4978 incognito mode just makes it where you aren't storing your browsing data locally. It doesn't do anything to protect you from hackers. if you were to click this link while in incognito mode, he could still get you. If you're trying to hide yourself better i would recommend setting up a proxy (poor mans VPN) and actual VPN (like express or nord) or using an onion browser like TOR. none of those would protect you tho if you were to click this link.

[@rayzor285]

Best way to do that is avoid being online as much as possible

[@Landmile]

@@mopioline65 lmao. The last part

[@claudiodelgado6654]

Hi Chuck! Thanks a lot for sharing this. I really appreciate all your work. After watching this video have to confess got scared of being already hacked and I thought that maybe you can create the II part teaching us how we can check, avoid or repair our machines after been hacked. Also I wonder a lot (and search) about the consequences of this are huge. For example what happen if I set and use the sincronize tool on firefox. Can then this JS script be traspased to other machine's browsers? Well THANKS A LOT MASTER!

[@duke605]

Cool, it’s a toolset that utilizes fully legitimate technologies like web sockets to spy on the user and interact with their session in real time (something most sites already do for legitimate use). I wouldn’t call this hacking (especially when all they have done is click the link) this is more social engineering as there is no vulnerabilities being used

[@BlackBlade]

Hacking is a much better click bait honestly Just nowmal social engineering here

[@usulatreides863]

Perhaps I missed it, but.... how to remove the hook? The affected browser of a friend might not be reachable to 'silently' remove the hook from. Also of course would be how to remove it if you got hooked by somebody not that friendly.

[@EightOneGulf]

There is no hook being 'installed'. It is not hacking your browser, but it allows the owner of the Beef server to run JavaScript commands remotely. The 'hook' is just an active connection between the client and server. Just browse somewhere else (check the url bar to be sure) and the hook is gone. To be honest I think the term "hacked" is a bit unfair here... It's just running potentially misleading JavaScript code which you can do on any website you own. It's not using any browser exploits. Even if it is not really "hacking your browser", it can be really effective though

[@usulatreides863]

@@EightOneGulf So in essence its a page which runs the JS only for as long as that page is open. Got it. :)

[@Berrymacquinnee]

There is no doubt that you will rise fast at the apex of your career *Pentagon Codes* . Because you are a very intelligent, smart, hard worker and your work ethic par excellence. Keep going People like you take the IM out of IMpossible by becoming PRO at tackling PROblems. You Rock!

[@my-nf3rj]

#procyberspy is good

[@DmitryShubin-ym4pj]

The thing which could be the most interesting one for this software was not shown in the video. As I see, all modern (for the moment video was filmed) browsers allow to intergrate agent software which interacts with Beef complex. And transfers all information from 'client side' to 'server side'. If it is so, the most interesting point is how it is possible (is it a bug or a feature). I suppose that authors should have more information about how it works. I see some parallels with SQL injection attack (I mean in terms how browser become compromised) but I would be glad to hear how it really works (or worked if this vulnerability is already fixed).

[@ankushgogna4628]

But Chuck, how do I protect myself from attacks like this? Like, are there any solutions? Idk, like vpn/antivirus or something?

[@euqatixeuqatix8639]

Beef bypasses your firewall, thereby the only REAL protection you have is not clicking on links you don't know. You can however block beef from executing scripts into your webbrowser by adding the chrome extension Java NoScript. This will block all scripts from running in distrusted websites, it's however not 100% safe. Just don't click on links, it's that easy.