Friday, January 22, 2016

Hooked Browser Network with BeEF and Google Drive

Today's guest post is brought to you by:

Denis Kolegov (@dnkolegov)
Oleg Broslavsky(@ovbroslavsky)
Nikita Oleksov (@neoleksov)


Hello All. In this post, we present implementation of a hooked browser network based on BeEF and the Google Drive service.


First, we would like to introduce ourselves. We are researchers in the Information Security and Cryptography Department of Tomsk State University located in Tomsk, Russia.

Our team takes part in the BeEF project by sometimes developing experimental features. We implemented DNS and ETag covert timing channels modules and extensions, modules for attacking BIG-IP devices. Our ETag covert timing channels research took 10th place in the WhiteHat Security Top 10 Web Hacking techniques of 2014.


Now, let's talk about why we really need to communicate with hooked browsers via Google Drive and how we can implement it.
One day we read Christian "@xntrik" Frichot's post about his implementation of Hooked-Browser Meshed-Networks with WebRTC in BeEF. The main purpose of that technique is to avoid detection and tracking of post-exploitation communication of hooked browsers (zombies) with BeEF command and control server.

Christian's approach is based on using of Web Real-Time Communications (WebRTC) technology to mesh all those hooked browsers, funnelling all BeEF commands through a single sacrificial beach-head. The main drawback is that BeEF server still must communicate with this beach-head browser.

We propose to use an alternate approach against tracking of BeEF server and its communications with zombies.
The main idea is to use storage covert 
channel communications over known and popular cloud web services, for example Google Drive. Using these services as shared resources between BeEF server and hooked browsers can meet our need. In this case, there is no direct communication between BeEF server and zombies: All of them communicate only with Google API servers.
Conceptually, this approach is not new. There are other tools (e.g. Gcat and Twittor) that use known and trusted services as command and control servers. But, so far, no one has blogged to the BeEF blog about using Google Drive.

The current implementation of this extension requires the custom version of BeEF.

We are also planning to implement this extension for the main branch of BeEF without any restrictions or additional requirements.


We recently presented our research at the Zero Nights 2015 conference. The slides are here: http://www.slideshare.net/dnkolegov/zn27112015


Below is the video demonstrating how this feature works: 

The PoC is available on Github: https://github.com/tsu-iscd/beef-drive.

35 comments:

  1. Very interesting article and good information. if anyone need any help for Browser Just click here for the browser support.

    ReplyDelete
  2. Kite projects Is providing construction, Handrail Brackets,engineering and facilities management to provide edge protection, vertical access and hand railing solutions to Industries in United Kingdom!

    ReplyDelete
  3. I blog frequently and I really thank you for your information. The article has truly peaked my interest. I will book mark your blog and keep checking for new information about once per week. I opted in for your RSS feed too.telemetry nursing

    ReplyDelete
  4. Your blog post is just completely quality and informative related to traders hits.. Many new testimonials facts and information which I have not heard about before. Keep sharing more blog posts.

    ReplyDelete
  5. Hellos craze for acting started in lofty college, during by happen he walked by the tragedy group also saw the undergraduates acting love poultrys.commercial electrician perth

    ReplyDelete
  6. This comment has been removed by the author.

    ReplyDelete
  7. I liked the idea to use storage covert channel communications over known and popular cloud web services and also i liked video demonstrating how this feature works. thanks for sharing knowledge.
    Coursework writing service

    ReplyDelete
  8. Green Grid System Provides cellular confinement system specifically designed and sold for Geoweb Root Protection Geotextile .Call to know about Root Bridge System!

    ReplyDelete
  9. Pretty post ! Thank you so much for such a nice sharing True Healing Self Healing about google drive. 1st i was not know about google drive because i just use as search engine.

    ReplyDelete
  10. CleanVape™ Technology for E-liquids and e-juice flavors. Wholesale Vaping and private label e-juice and e-juice liquid nicotine.motologistica

    ReplyDelete
  11. Nice post.Very likely I’m going to bookmark your blog . You absolutely have wonderful stories. Cheers for sharing with us your blog. Compliant labeling

    ReplyDelete
  12. I hope they continue their research about BEef hooked browser network. Customer can buy here any of the extensions needed.

    ReplyDelete
  13. I have been searching for quite some time for information on this topic and no doubt your website saved my time and I got my desired information. Your post has been very helpful. Thanks.diamond tip bow ties

    ReplyDelete
  14. Thanks for Nice and Informative Post. This article is really contains lot more information about This Topic.texas website design

    ReplyDelete
  15. Great feat . I read your post and i want to say you shared with us very useful informative and post but in thinks as compares to others post this post is really awesome.. In the last just i say keep it up and share with us more post..short wavy bob

    ReplyDelete
  16. This is a smart blog. I mean it. You have so much knowledge about this issue, and so much passion. You also know how to make people rally behind it, obviously from the responses.Brazilian honeymoon packages

    ReplyDelete
  17. nice! thank you so much! Thank you for sharing. Your blog posts are more interesting and impressive. I think there are many people like and visit it regularly, including me.
    192.168.1.1

    ReplyDelete
  18. Kite Projects provides the best and cheap Bespoke Stainless Steel Handrails and Stainless Steel Ladders Provider in Uk. Call us now 01962 886290 to get information grp

    ReplyDelete
  19. I really needed the information that you gave PassBeeMedia on this topic because I had to finish my project on this topic and now I have completed it and I am gonna submit it.Resin Bound Permeable Paving

    ReplyDelete
  20. Your blog provided us with valuable information to work with. Each & every tips of your post are awesome. Thanks a lot for sharing.international money transfer

    ReplyDelete
  21. Official indenture is serious, effective, sagacious, plus longer. That is symbol numerous amateurs vision it fastidious extra the gymnastics of thesis peaks.dallas web design

    ReplyDelete
  22. First I dont understand why share this and now after reading this I know this is really helpful info shared with everyone.texas website design

    ReplyDelete
  23. I am really thankful to the owner of this website Video of Root Bridge who has shared this wonderful article at here.

    ReplyDelete
  24. Pretty article! I found some useful information in your blog, it was awesome to read, thanks for sharing this great content to my vision, keep sharing.
    Regards,
    JAVA Training in Chennai | Multimedia Training in Chennai

    ReplyDelete
  25. Thank you for this useful publish where else could anyone get that type of details in such an ideal way of composing and i was looking for more details.kurzy a školenia

    ReplyDelete
  26. Great article. I loved your use of words and examples. I can see that you are becoming a worthy author. Thank you for sharing such intimate feelings.dallas web developer

    ReplyDelete
  27. That was bit funny conversation. I could get an interesting topic to read through this article.transfer money abroad

    ReplyDelete
  28. Thank you for benefiting from time to focus on this kind of, I feel firmly about it and also really like comprehending far more with this particular subject matter. In case doable, when you get know-how, is it possible to thoughts modernizing your site together with far more details? It’s extremely useful to me.best way to transfer money abroad

    ReplyDelete
  29. Once you are well-informed about the real estate market and the selling process, selling your own home will become less stressfu.https://bowselectie.com/

    ReplyDelete
  30. Thank you for sharing This knowledge.Excellently written article, if only all bloggers offered the same level of content as you, the internet would be a much better place. Please keep it up!glyphicon

    ReplyDelete