Thursday, August 9, 2012

BeEF 0.4.3.7

We've been so busy in the last months that we haven't even had the time to write a blog post with the 0.4.3.6 changes :D

Anyway, here we are with a new tasty piece of BeEF, 0.4.3.7!

Here is the breakdown of the most important changes (without mentioning bugfixes, that are always there if you look at our GIT repo history):


  • Twitter and E-mail notifications (thanks @marcwickenden): we have a new extension where you can configure an SMTP server or Twitter account in order to receive automatic notifications as soon as a new browser is hooked in BeEF;
  • HTTPS support (thanks to one of our long-term developers, Christian @xntrik Frichot): you can now start BeEF with full HTTPS support. You should use this when you want to target HTTPS applications, especially if the user is using latest Chrome/Firefox browsers: they do security checks for mixed content and prevent the hook to work in case you use HTTP;
  • new Chrome extension module (thanks Mike Haworth): now you can have screenshots of the current tab the user is in;
  • Gmail phishing and Flash Webcam modules (thanks floyd.ch): using the first module you can logout a user from Gmail, create a fake Gmail login page, then steal the the Google account credentials. With the second module, if the user clicks "Allow Webcam" from the popup created by Flash, you can get photos from his webcam at a defined time interval you can specify; 
  • Nat_pinning module (thanks Bart Leppens): you probably remember Samy's research on the topic. Well, we added this nice attack to BeEF, so you can have fun with it. 
  • The GlassFish exploit has been enhanced (again, thanks Bart), and we also added GlassFish fingerprinting to our internal network fingerprinting module.
  • Brendan @_bcoles Coles, as always, did a great job adding new modules and porting various attacks to BeEF: Spring exploit for CVE-2010-1622, lots of XSRF and some RCE modules for various embedded devices like routers and cameras (D-Link dir-615, Linksys wcv series, Cisco E2400, 3Com OfficeConnect ADSL Wireless 11g, Asmax AR-804gu). Other than that, he also added enhanced fingerprinting for various mobile devices, and the balloon dialogs for the admin web-gui. Let us know via @beefproject if you want more/different stuff in this dialog.
  • Michele @antisnatchor Orru, except from bugfixes, added the confirm_close_tab module, in order to achieve better hook persistence and annoy the user (basically the user is asked  for confirmation - in a loop - when he's closing the hooked tab). Another bunch of changes he worked on were about the AssetHandler (you can now bind/unbind raw sockets in BeEF, useful for example in the nat_pinning module to bind a socket on port 6667), the RESTful API (added a /api/modules/multi endpoint that you can now use to launch multiple modules at once to a single target) and the admin web-gui (added a JSON endpoint that enables you to call the RESTful API from ExtJS)
These 2 months were fun as always. If you want to get involved with out project, just let us know. We have tons of features to implement and we need man-power :D

Last thing to mention is the nice BlackHat 2012 presentation about BeEF in MiTM scenarios, from Steve Ocepek and Ryan Lynn (for those of you who don't remember him, Ryan developed the Metasploit integration we currently have in BeEF). Have a look at what awesome stuff they did here. For those of you who were not already using Ettercap + BeEF, you should definitely have a look at their work. Even if you used Ettercap before, they wrote a bunch of nice MiTM Ruby scripts using PacketFu that automate the whole process.

92 comments:

  1. I configured all the necessery credientials for beef notification in config.yaml (auth token, ...) but when i launched beef i couldn't go through the authentication process in the admin panel using default username/password (beef/beef), i disabled the notification once again and everything got back to normal.

    is there anaything else to configure to resolve that issue?

    ReplyDelete
  2. Log Message:
    -----------
    Fixed Twitter client to not cause errors on failed tweets allowing logins etc to continue

    Sorry about that.

    ReplyDelete
  3. (we haven't looked at e-mail yet)

    ReplyDelete
  4. Yes, that's a great information to all of people. I am very happy to know this content as well. I hope that business man's are need to follow this article. amazon coupons

    ReplyDelete
  5. It is the one of the best information to me which was very essential to me as well and sure that it must be effective to me to know the huge unknown information. Security Camera Review

    ReplyDelete
  6. This was reported to MSRC on July 2 and hasn't been fixed to date. conversion bug

    ReplyDelete
  7. Good Post! Thank you so much for sharing this pretty post, it was so good to read and useful to improve my knowledge as updated one, keep blogging.

    Selenium with python Training in Electronic City

    ReplyDelete
  8. My Assignment Services, is well-known for its 24-hour online Assignment Help on the WhatsApp platform. Students can reach out to us with their queries at any point of the day or night and get the most effective solutions for them. University assessments have to follow specific referencing and citation styles like Harvard, APA, Chicago and MLA. Also, they should be referenced only from credible academic sources. Our best online academic help experts talk about how to select and evaluate the right academic sources, which will help you clear all your academic-related doubts. Assignment Service by My Assignment Services has been trusted by millions of students worldwide for over a decade. We have been providing complete academic assistance to students struggling with their college and university tasks. We have a team of dedicated subject matter experts who maintain a 100% record of submitting orders well before the deadline. This also gives the students some time to review them and ask for revisions, if needed. You can trust our academic ghostwriters completely to get best quality write-ups including case studies, research proposals, dissertations and Assignment Help Melbourne, and more.

    ReplyDelete
  9. Either you are studying in CQU, Latrobe, Deakin, Monash, Swinburne or any other university in Australia our writers are experienced and qualified enough to help you with your research projects. Over the last few years, assignmentstudio.net has already assisted number of students around Australia by helping them on their University assignments.
    For further information queries visit our website my cqu

    ReplyDelete

  10. Need Case Study Help?
    Get Assignment Help from Australia's No.1 Assignment Help Service.
    For further information queries visit our website case study help

    ReplyDelete
  11. Assignment studio.net is the place if you are struggling with your thesis or evaluation paper. We have professional thesis, essay writers to help you with any kind of assignment help.
    For further information & queries, visit our website thesis writing

    ReplyDelete
  12. We normally provide our clients with the opportunity to obtain College Essay Writing Service that has been crafted according to all the instructions that the client has provided. Our company also ensures that the client gets the Nursing Research Writing Services.

    ReplyDelete
  13. Custom Boxes Zone is another name of high-quality packaging. Get custom printed boxes with wide variety of boxes that can be fully customized on customers’ demand. You will also make your customers excited to buy your products as soon as they will look at the packaging. Our fastest and free delivery services have made us a prominent and most trusted custom eyeshadow boxes packaging supplier.

    ReplyDelete
  14. 5. Arar transport company has tools and equipment on the latest model, in order to carry out disassembly and installation easily and safely
    شركة نقل عفش

    ReplyDelete
  15. It is a great article. You will surely like this also because it is a great stuff
    sonic games

    ReplyDelete
  16. The composers of the Custom Economics Paper Writing Services are the leading ones in the industry as they give high quality Custom Economics Essay Writing Service and they assure originality of their Professional Economics Paper Writing Service.

    ReplyDelete
  17. pinoy tambayan lambingan and all the filipino Tv replays you will be watch online in hd. We will share with you pinoy1tv replays online in hd.

    ReplyDelete
  18. เล่นง่ายได้เยอะ โจ๊กเกอร์123 slot online ที่นี่คลิก
    https://www.slotxd.com/jokergaming123

    ReplyDelete
  19. Apart from the major packaging, like lipstick boxes, custom makeup subscription boxes and perfume boxes packaging.We offer a range of designs, printing options and color schemes that will create an attraction for your product.

    ReplyDelete
  20. Join the play cool math game to have yourself moments of relaxation as well as dispel the fatigue after a long day.

    ReplyDelete

  21. ارخص شركة نقل عفش

    ارخص شركة نقل عفش بالمدينة المنورة نقل عفش بالمدينة المنورة
    ارخص شركة نقل عفش بمكة نقل عفش بمكة
    شركة نقل عفش شركة نقل عفش

    ارخص شركة نقل عفش بجدة نقل عفش بجدة
    دينا نقل عفش جدة دينا نقل عفش بجدة




    ReplyDelete
  22. اولین و مهم‌ترین مزیت خرید بلیط اتوبوس اقتصادی‌بودن آن است. شما می‌توانید با صرف هزینه‌ای کم به مقصد موردنظرتان برسید. خیلی از افراد از سفرهای هوایی می‌ترسند و سفر با قطار را پرسر و صدا می‌دانند، برای این افراد اتوبوس بهترین انتخاب است.

    www.safarme.com/bus/tehran-to-mashhad

    خرید بلیط اتوبوس VIP

    ReplyDelete
  23. I have read you post, Great work you really did it very well. Keep working like this and sharing informative posts like
    puffin browser for pc

    ReplyDelete
  24. Really very useful and Informative information are provided here. Thank you so much for writing keep up like this.

    Vidmate apk
    How to hide whatsapp online status
    TuTuApp APK
    Instagram liker app
    GPS Phone Tracker
    video editing software

    ReplyDelete
  25. สล็อตออนไลน์ได้เงินจริง เล่นทุกวันไม่มีเบื่อแน่นอน เล่นเลยที่นี่ slotxo แจกเงินจริง

    https://www.slot2xl.com/

    ReplyDelete
  26. extension: now the web_cloner can serve modified pages as well. This is needed when the page use custom logic to submit the form.

    file

    ReplyDelete
  27. For dispatching your eyeshadow safely, you can’t find enough secure boxes than our custom eyeshadow boxes.Eyeshadow packaging is completely protected and their dimension fully covers the products.These boxes can be availed very easily; you can receive them just after 2 to 3 days of your orders placed.You can also use custom eyeshadow boxes to present your sample products of eyeshadow.

    ReplyDelete
  28. Good post!

    เว็บที่รวมรวบเกม slot ไว้ในที่เดียว

    เติมเงินง่ายด้วยระบบอัตโนมัติ Wewallets

    https://www.wewallets.com

    ReplyDelete
  29. Great post! So Cool
    สมัครเล่นกับเรารวยแน่นนอน
    Wewallets.com

    ReplyDelete
  30. Nice !

    เล่นสล็อตออนไลน์ง่ายสะดวกรวดเร็วต้อง

    https://www.autowallet.net

    ReplyDelete
  31. Our service has been very supportive to our customers and especially in solving their problems and providing them with best boxes which are fully credible and worthy of their trust.
    Pre Roll Packaging,

    Cardboard Cigarette boxes,

    Blank Cigarette Boxes,

    ReplyDelete
  32. <提供24小時借錢管道,讓《E7借錢網》及時處理您小額借錢的問題。民間借貸中有豐富的汽車二胎資訊,身分證借錢以及辦門號換現金的方法,是您缺錢借現金、快速借錢好助手!借貸,辦門號換現金

    ReplyDelete
  33. 提供24小時借錢管道,讓《E7借錢網》及時處理您小額借錢的問題。民間借貸中有豐富的汽車二胎資訊,身分證借錢以及辦門號換現金的方法,是您缺錢借現金、快速借錢好助手!借貸

    ReplyDelete
  34. Thiết kề và thi công nhà xưởng thép tiền chế là một trong những công đoạn quan trọng để đảm bảo cho một doanh nghiệp hoạt động hiệu quả. Nếu doanh nghiệp xây dựng nhà xưởng công nghiệp tốt, hợp lý công năng, kết cấu sử dụng sẽ tiết kiệm được rất nhiều chi phí. Các nhà xưởng khung thép tiền chế thường được thiết kế để cung cấp không gian chức năng cho các hoạt động nội bộ như: các cẩu trục, làm kho chứa hàng hóa, thiết bị hoặc làm không gian văn phòng làm việc, tiếp khách, trưng bày sản phẩm.

    Các nhà xưởng tiền chế có điếm nổi bật đó là không gian sàn mở rộng. Sự xuất hiện của các loại kết cấu thép là lý tưởng có các kỹ sư thiết kế thực hiện các ý tưởng kiến trúc và đáp ứng các yêu cầu công năng sử dụng.tư vấn thiết kế nhà xưởng công nghiệp

    ReplyDelete
  35. welcome to my website !https://boxesme.com/custom-lipstick-boxes/

    ReplyDelete
  36. Epicwin Auto online slots can be downloaded at EpicWin. How to play Epic Win. Epic Win game entrance is rich with little capital by EpicWin. Free EpicWin credits. Play epic win slot epicwin auto system.

    ReplyDelete
  37. With regards to your scholastic dreams and grades we attempt to give our best by supporting you in finishing your school assignments.

    Our managerial specialists work dedicatedly and enthusiastically to give top quality article composing help to the understudies. Fastidious paper structures,

    topic significance, liberated from syntactic mistakes are fundamental qualities that our exceptionally experienced and skilled essayists attempt for.

    As yet suffocating in the concern to finish your school assignments?
    more - assignment help uk

    ReplyDelete
  38. Great quality bundling is a positive method to build the number of clients through awful and low quality consistently diminishes the number of cigarette buyers and results in ruining cigarettes. Our Blank cigarette Boxes are extremely useful for your cigarette image to develop quickly and to enable the new clients to snatch the market expediently. Paper cigarette boxes are constantly meant to upgrade the number of purchasers.
    Custom Boxes
    Paper box printing
    bath bomb packaging
    Sleeve Boxes
    Postage Boxes
    Burger Boxes

    ReplyDelete
  39. สำหรับใครที่มีความต้องการเล่นพนันเกมสล็อตออนไลน์อย่างจุใจและมีเกมสล็อตอัพเดทให้เลือกใหม่อย่างคุ้มค่ามากสุดด้วยการเลือกใช้งานผ่านเว็บ

    https://www.slotxo369.com/

    ReplyDelete
  40. Finally, you need to make sure that you use the product in the right way and that you follow the directions closely. Failure to do so could result in an infection or even cause you to become ill. The best option would be to use alcohol disinfectant spray to drive the best results with the least risk.Our services are sanitizing services, sanitizing companies, disinfecting services, house sanitizing services, disinfect cleaning services and chicago commercial cleaning services.

    ReplyDelete
  41. Are you looking for a reputable and valid online hotel reservation site for reserving hotel in Shiraz? Go to Jainjas site and then to the page of hotels in Shiraz and look at more than 30 hotels and hotel apartments that we have provided for you to reserve. If you want to spend less time, the searching filters of the right side of the page will help you. In fact these filters are designed based on your priorities. For example, if you have a special price range in your mind, you can enter that price in order to show the results based on this price. Jainjas also gives you this possibility to have good discounts in reserving hotels of Shiraz. Both chances of staying in the best and the most luxury hotels of Shiraz and staying in a cheap hotel of Shiraz are provided for you in Jainjas.
    https://jainjas.com/shiraz

    ReplyDelete
  42. เติมเงินง่าย เล่นได้ทุกเว็บ ต้องนี้เลย slotxo เว็บนี้เว็บเดียวจบ Wow!!

    ReplyDelete
  43. Hotel reservation in any city from Jainjas site is a pleasant and enjoyable experience that without doubt you want to try it again. Advanced searching facilities based on address, capacity, price and the kind of hotel among more than 1500 hotels or hotel apartments gives you the power to choose and relaxes your mind. Also, all the hotels with services, facilities, pictures and rules are introduced for you and you will choose with full awareness. The other important point is the presence of 24-hour support team in all stages of booking so that you can stay in your favorite hotel with peace of mind.
    https://jainjas.com/hotel_kish-shayan

    ReplyDelete
  44. Do you know that you can find cheap airplane ticket in any kind of charter and systematic tickets? It means that even it is possible that you can find cheap airplane ticket in systematic tickets which are cheaper than charter tickets. The subject that which kind of ticket is cheaper than other tickets depends more on time and this is the point that determines what kind of ticket is cheaper than others. If we are in a time period that a lot of trips are done like some holidays or special occasions about cheap airplane ticket, there is no difference between charter and systematic tickets but at times when there are not much trips, cheap airplane tickets get more attention about charter tickets

    https://ghasedak24.com/چارتر

    ReplyDelete
  45. สมัคร slotxo เกมสล็อตคุณภาพกับตัวเลือกมากมาย เลือกเล่นได้ตามความต้องการกับเกมพนันหลากสไตล์

    ReplyDelete
  46. nice article meaningful . thanks for that.
    we are providing high quality of custom boxes in all over the world with free shipping.
    shower bomb boxesshower bomb boxes
    custom burger boxescustom burger boxes
    custom bakery boxescustom bakery boxes.
    every kind of custom boxes we are providing.

    ReplyDelete
  47. ฉันเป็นด้วยกับคุณ ขอบคุณสำหรับข้อมูล. ฉันเป็นนักพัฒนาเว็บทำเงินออนไลน์ มียอดผู้เข้าเล่นมากที่สุดในเอเชีย Vegus168 บริการเกมคาสิโนมากกว่า 200 รายการ สมัครเว็บ แทงบอล เราเปิดให้บริการ 24 ชม. สมัครสมาชิกใหม่รับเครดิตฟรีทันที หากเป็นสมาชิกเก่าเราก็มีโปรโมชั่นดีๆมากมายที่รอคุณอยู่.

    ReplyDelete
  48. Online Assignment Help
    Looking for Online Assignment Help Hire our PhD Writers from Australia for Assignment Help at Affordable Prices.Assignment Help Essay Help and Dissertation Help Services Students have a lot to bear throughout their academic life. These are the golden days of youth where you can make the distinction between how to live productively or negatively Online
    Assignment Help

    ReplyDelete
  49. MGWIN88 slotxo ให้บริการ คาสิโนออนไลน์ มีเกมให้เลือกเล่นมากมาย บาคาร่า รูเล็ต เกมไพ่ ยิงปลา ฝาก ถอน โอนไว ที่สุดในไทย

    ReplyDelete
  50. Wales publications research grant UK breaks the barrier to getting the research from the developing countries and by publishing their research in international journals and encounter the issues that researcher faces across all developing countries,
    by providing them active opportunities to fill the gap between the scientific knowledge and new technology development.

    ReplyDelete
  51. Wales Publications is a research publishing solution provide best Publication Research In UK
    in all issues from research to the journal publication are catering in your discipline based on your requirements.

    ReplyDelete
  52. Nice and very helpful article, thanks for sharing

    ReplyDelete
  53. Thanks for Sharing this article, I really impress your work. you can get them with printed and wholesale options which further make them the most suitable packaging.
    Paper Cigarette Boxes,
    Packaging for Bath Bombs
    Eyelash Boxes
    Pencils Boxes

    ReplyDelete
  54. This comment has been removed by the author.

    ReplyDelete
  55. I really enjoyed reading this blog. It was explained and structured with perfection
    Chocolate Boxes
    Custom Sleeve Boxes

    ReplyDelete
  56. Every one of our assignments and reviews experience various degrees of value and plagiarism check before conclusive conveyance. Request your plagiarism report for complete fulfillment; we can even give that when looking for extraordinary assignment help from our profoundly qualified Australian Assignment Writers. more- assignment provider , assignment help australia

    ReplyDelete
  57. We are providing best Assignment Help service to all the students in Australia so that they can understand their assignments properly before final submission. My Assignment Help writing services help them in completing their all academic tasks on given time to get good grades in the subject.

    ReplyDelete
  58. We are well established IT and outsourcing firm working in the market since 2013. We are providing training to the people ,
    like- Web Design , Graphics Design , SEO, CPA Marketing & YouTube Marketing.Call us Now whatsapp: +(88) 01537587949
    : SEO Service Company
    good post Mobile XPRESS
    Free bangla sex video:Delivery Companies in UK
    good post Mobile XPRESS

    ReplyDelete
  59. Well quality and high-class escorts agency in Gurgaon. Are you escorts seeker and live in Gurugram if yes, we have good news for you? Our hot models provide sexual pleasure on your bed. Gurgaonhotcollection offer a wide range of call girls like college escorts, housewife escorts, independent escort and Russian escorts in Gurgaon. Hire best escorts at very cheap rate in your city 24/7hr.
    https://www.gurgaonhotcollection.com/
    https://www.gurgaonhotcollection.com/about-us
    https://www.gurgaonhotcollection.com/gallery

    ReplyDelete
  60. Bath Bomb Packaging provide you the best eco friendly bath bomb packaging, which will protect your customer as well as give it a perfect look.

    ReplyDelete