-
Posted: February 25th, 2010, 9:31am CST
A new BeEF SVN is being hosted on beef.googlecode.com. It is early days, but if you would like to get involved join, the development mailing list. Checkout a copy with the following command: svn checkout http://beef.googlecode.com/svn/trunk/ beef-read-only
-
Posted: February 12th, 2010, 9:11pm CST
More great news: XSSShell and XSSTunnel is being rolled into BeEF! In another boost to the BeEF project, Ferruh Mavituna is joining the development team. The author of XSSShell and XSSTunnel will be helping roll his tools into the next version of BeEF. Ferruh's research will increase the functionality and the versatility of the Browser Exploitation Framework.
-
Posted: February 6th, 2010, 11:44pm CST
Great news: Browser Rider is being rolled into BeEF! The avid security researcher will no doubt be aware of the Browser Rider project developed by Benjamin Mosse. It is a framework which boasts some great features: Back-end database Obfuscation Polymorphism This tool, along with the involvement of Benjamin, will be a significant boost for the BeEF project. There are some big improvements planned for future versions of BeEF. Stay tuned!
-
Posted: February 6th, 2010, 11:44pm CST
Great news: Browser Rider is being rolled into BeEF! The avid security researcher will no doubt be aware of the Browser Rider project developed by Benjamin Mosse. It is a framework which boasts some great features: Back-end database Obfuscation Polymorphism This tool, along with the involvement of Benjamin, will be a significant boost for the BeEF project. There are some big improvements planned for future versions of BeEF. Stay tuned!
-
Posted: February 2nd, 2010, 9:26pm CST
A new BeEF mailing list has recently been set up. This list will be focused on discussions around BeEF development. If you would like to get involved in the development or make some suggestions at the code level, subscribe to the development mailing list. Simply send an email to beef-dev-subscribe@bindshell.net.
-
Posted: December 7th, 2009, 6:42pm CST
PHP in Fedora (Fedora 12 at least) has the short_open_tag turned off by default. In this state it will cause an error if you try to use BeEF. Thanks to Steve 'Ashcrow' Milner for pointing this out. To fix this try the following change to the /etc/php.ini file: -short_open_tag = Off +short_open_tag = On
-
Posted: September 20th, 2009, 1:55am CDT
Ryan Linn's efforts adding XML-RPC to BeEF and Metasploit allow the closer integration between the two tools. If you saw his presentation at DEFCON, you will already be aware of some of the new modules that have been rolled into the latest version of BeEF. He has put up a post and videos demonstrating his work. The videos can be found here: NTLM Challenge Credential Theft with BeEF and Metasploit Executing Browser AutoPWN Through BeEF Upgrading BeEF in Samurai WTF
-
Posted: September 20th, 2009, 1:04am CDT
Jabra (who you will know from his input to various modules) has posted some of his BeEF videos from DEFCON and Black Hat. The videos have been available for a little while and if you haven't checked them out, you should. The videos can be found here: MSF Browser Autopwn (M) Malicious Java Applet Detect Visited URLs Detect Virtual Machine Detect Software
-
Posted: September 18th, 2009, 2:24am CDT
I have just released BeEF version 0.4. Get it here while it is hot. This version has more modules and a more flexible framework. Enhancements in the latest version include: Integration with Metasploit via XMLRPC Mozilla extension exploitation support New browser functionality detection modules Tiered logging for module actions and results
-
Posted: September 17th, 2009, 6:38am CDT
RSnake and Jabra presented at DEFCON on various decloaking methods. One technique demonstrated was employing SMB to enumerate software installed on the target machine. The BeEF module seen in the demonstration can be downloaded from here.