Installation and use of beef XSS

beef Introduce

BeEF yes The Browser Exploitation Framework Abbreviation . It's a focus on Web Penetration testing tools for browsers .

With the growing concern about customer network attacks, including mobile clients ,BeEF Allow professional penetration testers to use client attack vectors to evaluate the actual security status of the target environment . Unlike other security frameworks ,BeEF Beyond the enhanced network boundaries and client systems , And check availability in an open environment ：Web browser .BeEF Hook one or more Web browser , And use them as beachheads to launch directional command modules and further attack the system from the browser context .

BeEF xss Apart from XSS Exploit tools , Or a XSS Platform building tools , It can be built locally or on the server , The only downside ： I won't support it Windows

beef-xss install

Type directly ：

beef-xss

Then install according to the system prompts , Input Y that will do .

Problems arise

Then there is an unexpected error , I'm so happy ！ I'm not sure if I don't report an error ！

Don't panic , Pay attention to the last system prompt ：

E:  Several packages cannot be downloaded , Do not run  apt-get update  Or add  --fix-missing  Try again ？

It's so euphemistic , Then try it .

terms of settlement

According to the last system prompt , type ：

sudo apt-get update

Then wait and pray quietly ...

The emperor is willing to help others , installation is complete , No mistake （*|~|*）

  Then let's continue typing ：

beef-xss

Next is the long download and decompression , Let's pray now ...

 

  The result is smooth , This completes the installation ！

Startup and use

Type again after the installation ：

beef-xss

Note that at this time ： For the first installation, set and change the password

Start the service and visit the browser ：http://127.0.0.1:3000/ui/panel

The default username is beef

If you forget your username and password or need to change it ：vim /etc/beef-xss/config.yaml

Reference resources ：kali 2019.4 Install and replace domestic source code _ Xiaobai is a blog with a lot of attention -CSDN Blog _kali2019 Source change kali linux As a penetrating tool integrating penetrating tools , It is widely spread and used in the safety circle , And this system is especially popular with security beginners , Today, let's start to install and configure kali linux. Experimental environment ：kali linux 2019.04vm virtual machine 1. Now download online kali linux 2019.04 Mirror image , Here we choose to download kali-linux-2019.4-amd64.iso Mirror image ： Download link ：2. Click “workstation" after , Click file... In the pop-up shortcut menu –> New virtual machine ：3. Create a new virtual machine https://blog.csdn.net/qq_45766004/article/details/110011811