Thursday, October 11, 2012

BeEF and Pwnies - The Pwn Plug!


As a Pentester, you sometimes need to think out of the box and use multiple techniques in order to prove to a client that they are vulnerable even in their internal network.  I was recently working with a client which had a XSS vulnerability in one of their internal web applications that just was not accessible from the internet...

Until I introduced the client to BeEF and the Pwn Plug Elite.


I knew I could use BeEF to show the client the vulnerability, but, I needed the BeEF server to be accessible on their internal network. That was where the Pwn Plug came to mind. But, it did not come with BeEF out of the box. With BeEF being so flexible I was able to install it on the Pwn Plug and I wanted to share how I did that.

Here is the code to install all the requirements and setup the beef_launcher script.

All the commands should be typed while logged in to the Pwn Plug.

Code:


# update and install requirements
sudo apt-get update
sudo apt-get install curl git-core ruby subversion
sudo apt-get libssl-dev libsqlite3-dev ruby1.9.2

# PwnPlug 1.1.1 has a directory called storage 
# that is on the SD CARD with Metaspolit
cd /storage/

# Downloading rvm-installer
# bash >> curl would not work
curl -sk https://raw.github.com/wayneeseguin/rvm/master/binscripts/rvm-installer >> rvm-installer
chmod +x rvm-installer
./rvm-installer

# /usr/local/rvm is the install location
echo '[[ -s "/usr/local/rvm/scripts/rvm" ]] && . "/usr/local/rvm/scripts/rvm"' >> ~/.bashrc
source ~/.bashrc
source /usr/local/rvm/scripts/rvm

# Installing rvm....
/usr/local/rvm/scripts/rvm install 1.9.2

# q needs to be pressed during install 
rvm use 1.9.2 --default

# Download BeEF..
git clone git://github.com/beefproject/beef.git
cd beef

# Installing Ruby Gems
gem install bundler
bundle install

The beef_launcher.sh script should be created separately.

# create beef_launcher.sh in pentest / folder 
#################################################
#beef_launcher.sh
#!/bin/bash

export gem paths
export GEM_PATH=/usr/local/rvm/gems/ruby-1.9.2-p320/gems/
export GEM_HOME=/usr/local/rvm/gems/ruby-1.9.2-p320/gems/

# enter beef directory
cd /storage/beef

# print default password information
echo 'DEFAULT USER/PASSWORD: beef/beef'
echo ''

# launch
ruby-1.9.2-p320 beef –x

#end of beef_launcher.sh

And now...

#make /pentest/beef_launcher executable
chmod +x /pentest/beef_launcher.sh

#To run beef type
/pentest/beef_launcher.sh

By installing BeEF onto the Pwn Plug I was able to inject the BeEF hook into the vulnerable web application and remotely control users’ browsers thanks to the tunneling ability of the Pwn Plug. I couldn’t have landed the contract without the use of BeEF and the Pwn Plug.

This post contributed by:

Tobias Mccurry
Independent Security Consultant
Twitter - @lordsaibat
LinkedIn - http://www.linkedin.com/pub/tobias-mccurry-a-security-gsna-gcih/10/b81/477

P.S.
We have it on good authority from the Pwnie Express team that BeEF might be integrated in one or more of the Pwn Plugs soonish. Exciting! Keep an ear to the ground. You'll hear us running.

76 comments:

  1. Good site with informative post. I am looking forward for more posts,. Keep sharing and spreading knowledge. thanks :)

    Assignment writing service reviews

    ReplyDelete
  2. This Browser Exploitation Framework project is good to reduce the vulnerabilities that we are prone. Great suggestions that you have made to remove the threats even in the network we use.term paper writing service reviews

    ReplyDelete
  3. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. Great work.
    hotmail login | red ball

    ReplyDelete
  4. I think the BeEF server will help the users to access the high speed internet. The code for installing the sever is given here so it is very easier for the user to install.
    essay writers uk

    ReplyDelete
  5. Thank you for your information that you've shared. It's really helpful for me.
    * hotmail sign

    ReplyDelete
  6. Thank you for this tremendous and informative post. pay to do my essay is the service to help students. If you want to avail this, get it now.

    ReplyDelete
  7. The blog or and best that is extremely useful to keep I can share the ideas of the future as this is really what I was looking for, I am very comfortable and pleased to come here. Thank you very much.
    animal jam | five nights at freddy's | hotmail login

    ReplyDelete

  8. there will replica rolex always be accompanied by his father's shadow, replica watches
    xsilent but powerful, escort for you, with you gallop blue sky.Time to praise the father of love replica watches uk Father's Day masterpiece watch selection

    ReplyDelete
  9. Thanks for sharing this great. Keep sharing more useful and conspicuous stuff like this. Thank you so much
    192.168.l.l

    ReplyDelete
  10. Awesome and incredible site. I am intrigued all that much in the topic of your online journal, its my first visit upload to instagram

    ReplyDelete
  11. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. Great work instagram online

    ReplyDelete
  12. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. Great work. instagram online

    ReplyDelete
  13. In order to access Gmail, you need to create a google account first. you heard it. So howcreate gmail account
    create new gmail account do you think you can create a new Gmail account. Just follow the steps.

    ReplyDelete
  14. i dont think that i can make it like this anyway in my lifetime :( it is saddening but i will do try all my best. thank you for teaching.
    dissertation Writing Service

    ReplyDelete
  15. Really cool post. It's truly extremely pleasant and valuable post.Thanks for offering this to us! it's my first visit. Custom Essay Writing Service

    ReplyDelete
  16. Your sharing of this content is very interesting. I like it very much. Hopefully I will be able to read more post from you. Write My Essays

    ReplyDelete
  17. Interesting post! This is really helpful for me. I like it! Thanks for sharing! How to Write A+ Essays

    ReplyDelete
  18. The first time I saw this website, I was immediately attracted to zoom. Moreover, all mortgage & tax arrears the information is in my opinion quite interesting and intriguing. I hope you construction loan with mortgage also visit my website and pass judgment on Costa Calida my website. Thanks.

    ReplyDelete
  19. Jual Obat Aborsi Cytotec, Cara Aborsi Ampuh Penggugur Kandungan Janin, Obat Aborsi, Jual Obat Aborsi Asli Ampuh, Jual Obat Aborsi Cytotec Murah, Jual Cytotec, Cytotec Asli, Obat Penggugur Janin, Obat Penggugur Kandungan, Obat Peluntur Jani, Obat Peluntur Kandungan

    ReplyDelete
  20. hi.. hey .. using this development software is easy and simple to put it on the selection of the most popular amateurs or professionals write my essay, hoping to start their career in the app development field.construction loan terms

    ReplyDelete
  21. I have read you post, Great work you really did it very well. Keep working like this and sharing informative posts like
    this one. keep it up. I'm waiting for your next post...
    edmonton real estate board

    ReplyDelete
  22. It is imperative that we read blog post very carefully. I am already done it and find that this post is really amazing. psd to responsive html

    ReplyDelete
  23. Great tips I have noted all in my diary I'll use your all tips as you mentioned I really like your article I was searching on this topic as I'm working on this topics too. you can see my work but yours is too good I personally appreciate you for this. Keep working like this.thatshirt.com

    ReplyDelete
  24. I have read some of your blogs and I found all of them very much expressive and easy to understand. Some people have it very clear in their mind that how to express the ideas and views. I think you are one of them. Thank you for this.
    sharia compliant vehicle finance

    ReplyDelete
  25. Spot on with this write-up, I truly feel this web site needs far more attention. I’ll probably be returning to see more, thanks for the information!
    Cargo Management Software

    ReplyDelete
  26. Good Post! Thank you so much for sharing this pretty post, it was so good to read and useful to improve my knowledge as updated one, keep blogging.

    Selenium with python Training in Electronic City

    ReplyDelete
  27. Java Assignment help
    You should try to keep your article short. If you want to finish in lessen time. Make sure worlds limit should not exceed more than 500 words. Try to add only relevant data and information. If you feel that you are stuck, you can take assignment help online to get a proper idea. There are several web services which can help you to find out a suitable solution to your problems.

    ReplyDelete
  28. Coinpublish provides latest Blockchain and Cryptocurrency news
    Coinpublish is an independent publication working for a decentralized economy and delivering you with the latest updates on ICO, Bitcoin, Ethereum and Altcoin news.
    cryptocurrency news , ICO news , Latest Blockchain news , Bitcoin news , Ethereum news , Altcoin news
    We are the independent publication delivering news around cryptocurrency news, ICO news & Latest Blockchain news. Our platform focuses on providing news around blockchain, cryptocurrencies, distributed systems and decentralized global economy. We regularly keeps its readers updated on Bitcoin news, Ethereum news & Altcoin news. For all crypto enthusiasts, Coinpublish is the place to be.

    ReplyDelete
  29. Those who are searching over internet matlab assignment help can contact with us now. We are the best assignment writing service provider in melbourne, Australia. Our Academic assignment writers available 24*7 hours for the students, if you really want to need IT assignment help, java assignment help, programming assignment help, r programming assignment help, case study assignment help online at cheapest price and get high distinction grades.

    ReplyDelete
  30. Looking for best bars in Delhi to quench the weekend thirst, or just need some of the best pubs in delhi for enjoying evenings after long days at work. Choosing a place drink eBay celebrate should not be a difficult task. There are some things that are important while deciding about where shall you drink. The bar or the clubs should be close, economical, not congested & should also offer good food. But how can you find this information? It's actually quite simple. Just Download Boozeey Smartphone app for your smartphone.

    boozeey will immediately give you the list of best bars in Delhi from the nearby area & show you their drinks menu & prices. So never waste time ever again by going to multiple bars or pubs, #justBoozeey. Not only does the boozeey app helps you to find the best pubs & bars it will also give you great discounts with features like first drink free every night & happy hours anytime. Check it out on App Store & Google Play & discover for yourself the easiest & the most economical way to enjoy parties at best bars in Delhi.

    Not only your party experience is better with boozeey but Boozeey takes care of a safe ride home for you. The Boozeey app has in-built OLA cabs integration that will allow you to book an OLA cab to reach or depart from the bar location. So if you are living in Delhi NCR download the boozeey app & enjoy exclusive access to best bars & pubs in Delhi.







    ReplyDelete
  31. Thanks for sharing this post. Beef manufacturing is very developing as its good for health but check the source before buying this. Keep writing blog.
    hotmail login account

    ReplyDelete
  32. Thanks for sharing this post,
    Shen Tong is a top serial entrepreneur and an angel investor. Shen Tong is the founding member of well-reputed organizations like Food-X and FoodFutureCo. Shen Tong has invested in multiple companies which works towards good food and sustainable agriculture. Shen Tong has been supporting numerous organizations not only with funding but also with advice whenever needed. Shen Tong believes that health is efficient, so he is in support of not introducing digital efficiency into a traditional industry or market. According to Shen Tong, “our brain does not need to be tracked when it comes to food. Real food is naturally satisfying. So nature is our friend. That's the real friend here, and so this is one movement that Shen Tong joined and made a long-term commitment that he can have a smile on his face.” Shen Tong has invested in projects like GreenBlender, KitchenBowl, BoosterAgro, Servy and many more. Shen Tong not only invests money in a project he finds innovative but also pitches in advice and all the support he can to make the project a huge success.

    ReplyDelete
  33. Students now have an option for my assignment help service at Australiaassignmenthelp.com. We are providing the best assignment help service. Our writers hold Master’s and Ph.D. degrees from the top best universities across the globe.

    ReplyDelete
  34. When students request for best assignment writing services from us, they are guaranteed to receive best online essay writing service which has been crafted according to all their instructions.

    ReplyDelete
  35. We ensure all write research paper online processes, our company meet a certain prescribed and strict criteria to ascertain none of the research paper writer services quality is compromised.

    ReplyDelete
  36. Really very informative and creative. This sharing concept is a good way to enhance knowledge. www.appslure.com

    ReplyDelete
  37. Our Custom Research Paper Services are purely custom oriented and we design and develop each paper according to your requirements. Your instructions and personal requirements are taken into consideration when designing your Essay Writing Services.

    ReplyDelete
  38. قامت شركتنا بتطوير آلات الرش لرش المساحات الكبيرة والقصور والشركات وتوافر إمكانيات العقد الشهري وتقديم الضمان وخدمة الطوارئ خلال فترة الضمان.

    شركة مكافحة الصراصير بالرياض
    شركة مكافحة فئران بالرياض
    شركة مكافحة النمل الابيض بالرياض
    شركة مكافحة حشرات بمكة

    ReplyDelete
  39. This comment has been removed by the author.

    ReplyDelete
  40. Find your favorite sport at BT Sport, home of live sport, to watch all the recent videos, TV catch up, news, outcomes, fixtures and more.
    https://zvv4.com

    ReplyDelete
  41. Do you need online client support for Google Mail administration? Is it accurate to say that you are disappointed with your email account? Do you need online arrangements and client administration for your email account? Would you like to know the alternate way of getting a definitive quality assistance for Google Mail? Alternate route to get best quality client administration for Google Mail is contact the mail recuperation specialists on our +1-877-637-1326 Gmail Account Recovery Helpline Number.

    ReplyDelete
  42. New Jersey SEO company providing you with the best digital marketing services all over the US. The SEO company New Jerseycovers all aspects of digital marketing terms to boost your ranking on the search engine platforms. Seo company new jersey also provides you all social media services
    for the promotion and growth of your business on a social media platform like Instagram SEO .New Jersey Seo company also provides you with the service of web designing, mobile application development, and application development.

    ReplyDelete
  43. Dental Services in New Jersey since 1998-Hamilton Dental Care. Offers a variety of dental services in Hamilton to meet all of your dental needs. Let’s say if you are searching for the cosmetic dentistry near me or cosmetic dentistry hamilton NJ then you might come across with the Hamilton Dental Care because it is the best dental health services provider in the NJ. It gives you a smile that you can be proud to show off.

    Dental Services - https://www.hamiltondentalcarenj.com
    Facebook Profile - https://www.facebook.com/Hamilton-Dental-Care-153063602028984/
    Yelp Profile - https://www.yelp.com/biz/hamilton-dental-care-hamilton-township

    ReplyDelete
  44. Excel Dental - Dentist in Langhorne offers cosmetic dentistry procedures, restorative dentistry, affordable dental implants including mini dental implants as well as full dental implant in Langhorne, Pennsylvania. Book your dental appointment for teeth whitening for any cosmetic procedures in Langhorne, Pennsylvania if you are searching for a general dentist near me then you might come across with Excel Dental Langhorne because of its best dentist in Langhorne

    ReplyDelete
  45. There are Nursing Papers for Sale that are harder to complete than others. Thesis, dissertations, and research papers are some of them. Even if you are enthusiastic and capable student, you might need Thesis Proofreading Services in coping with your difficulties.

    ReplyDelete
  46. Share your feedback with others because your feedback helps others make the right decisions.


    Post here

    ReplyDelete
  47. ترجمه تخصصی انگلیسی به فارسی وانواع دیگر ترجمه توسط متخصصان در سایت ترجمه انلاین با کیفیت بالا انجام میشود

    ReplyDelete

  48. الخطوة 1
    خلط حل التنظيف الخاص بك. في زجاجه رذاذ ، والجمع بين كوبين من الماء ، وكوب من التبييض و 4 قطرات من المنظفات طبق السائل. دوامه لهم لمزجها ، ولكن لا يهز زجاجه لتشكيل السواد. تعيين زجاجه إلى "رذاذ " عند الانتهاء.
    شركة غسيل مكيفات بالقصيم
    شركة تنظيف مكيفات ببريدة
    شركة غسيل مكيفات بالقصيم
    الخطوة 2
    أزاله فلتر الهواء. رشها بخفه مع رذاذ العفن قتل قبل البدء في العمل علي منع جراثيم العفن من إطلاق في الهواء. يجب ان ترتدي قناعك في هذا الوقت قد البوب خارج ، أو قد تحتاج إلى فك بعض البراغي للحصول علي تشغيله. إذا كان التخلص منها ، ثم ختم في كيس من البلاستيك ورمي بها بعيدا. إذا كان قابل لأعاده الاستخدام ، ثم دمجها في 3 بوصات من الماء الساخن في بالوعة جنبا إلى جانب مع كوب من التبييض و 3 قطرات من المنظفات الطبق. ندعه ينقع لمده 15 دقيقه بينما كنت تعمل علي بقية مكيف الهواء ، ثم شطف وأزاله من الماء والسماح لها لتجف اثناء الانتهاء.
    شركة صيانة مكيفات بالقصيم
    شركة تنظيف مكيفات بالقصيم
    الخطوة 3
    شركة غسيل وصيانة مكيفات بالزلفى
    شركة تنظيف مكيفات ببريدة

    قم بازاله شواية الوحدة A/C. سوف تحتاج علي الأرجح إلى فك عده مسامير ثم الربيع الشواية عن طريق سحب بلطف إلى الامام في حين دفع إلى أسفل. قم بتعيين الشواية إلى الجانب للتنظيف الإضافي في دقيقه واحده.
    الخطوة 4
    رش الداخلية مع رذاذ العفن القتل. وهذا سوف تزن الجراثيم ويجب ان تقتل من العفن.
    أسعار شركات تنظيف المكيفات بالمذنب
    شركة تنظيف وصيانة مكيفات بالمذنب

    ReplyDelete
  49. الخطوة 5
    امسح المساحة الداخلية للوحدة. استخدام الخرق التنظيف والغسيل البلاستيكية للبقع صعبه. تاكد من انك قمت بازاله كل الجسيمات من الأوساخ من الداخل. عندما كنت قد انتهيت ، رش المنطقة بأكملها إلى أسفل مره أخرى ويمسح بها مره واحده لضمان ان جميع جراثيم العفن والأوساخ التي يمكن ان تكون العفن المتنامية اختفت.
    شركة تصليح مكيفات ببريدة
    أسعار شركات غسيل مكيفات بالرس
    شركة صيانة وغسيل مكيفات بالرس
    شركة تنظيف وصيانة مكيفات بالبكيرية
    شركة غسيل و صيانة مكيفات بالبدائع
    الخطوة 6
    نظف الشواية استخدم كميه متحررة من رذاذ التبييض وجهاز التنظيف البلاستيكي أو فرشاه الفرك لتنظيف الشواية. في كثير من الأحيان الغبار التي جعلت من الماضي مرشح سوف تجمع علي الشواية ، لذلك تاكد من الحصول علي كل شيء من الشواية وجافه تماما لمنع النمو الجديد.

    ReplyDelete
  50. Are you looking to hire top quality Custom Term Paper Help Services and cheap Legitimate Term Paper Writing Services? Rather than risking abject failure, you should consider hiring Legitimate Term Paper Help Provider.

    ReplyDelete
  51. A Legitimate Custom Essay Writing Help company should strive to ensure that all Custom Essay Writing Help work meets the standards of examining bodies hence ensuring that all are Custom Made Essay Papers.

    ReplyDelete
  52. Expand your jewellery rotation with our edit of necklace for women ,you can use necklaces in the party.

    ReplyDelete
  53. In environmental pest management, we want to be your partner in keeping your home pest free. You don't need to worry about how to get rid of mosquitoes anymore. Although we cannot repair your foundation cracks, we can prevent unwanted pests from benefiting from them. Call the Environmental Pest Management today.
    شركة مكافحة حشرات
    شركة مكافحة النمل الابيض بالرياض
    شركة مكافحة الصراصير بالرياض

    ReplyDelete
  54. Take our cost-effective and productive Web Designing & Development Service at your own choice. Contact with ITSWS Technologies Pvt. LTD.

    ReplyDelete
  55. If you are going to run online business, you should try good server for your business because it will be helpful for you. If your server will be low, you can't promote your business. SO, focus on good server and enjoy victory. I hope, you will follow my guidelines. Assignment writing services.

    ReplyDelete
  56. เล่นเกม joker123 slot online เครดิตฟรี
    https://www.slotxd.com/jokergaming123

    ReplyDelete
  57. Awesome article, it was exceptionally helpful! I simply began in this and I'm becoming more acquainted with it better. thanks for sharing this admic god bless you
    evan luthra
    evan luthra
    evan luthra
    evan luthra
    evan luthra
    evan luthra
    evan luthra
    evan luthra
    evan luthra

    ReplyDelete
  58. Really very informative and creative. This sharing concept is a good way to enhance knowledge thanks for share this admin
    Evan Luthra has that rare and coveted ability to turn original ideas into businesses that are both innovative and profitable. At 24 years-old, he has an already impressive resume and career history. Evan Luthra started his journey as a serial entrepreneur as an adolescent and was bitten by the "digital bug" early and often. This forward thinking, technology-minded entrepreneur embarked on his first digital endeavor at just twelve years old by curating technology-related news, and he garnered a 250,000 readers in doing so. Evan Luthra then began developing mobile apps with the advent of mobile app popularity. Always on the cusp and leading edge of new trends and innovations, Evan Luthra has become a true innovator and a recognized name in the world of Startups.

    ReplyDelete
  59. THANKS FOR SHARE THIS AWESOME BLOG
    Evan Luthra and I met back in 2016 and we began to build our great relationship. Later in 2019 I approached Evan Luthra and at that time my co-founder (Paul Rosa IV) and I brought Evan onto the GameForm team as an investor and technical partner. Evan and his team at Startup Studio have exceeded all expectations and have enabled our team to bring GameForm to market in under 10 months. In addition, Evan Luthra has provided many excellent introductions that have led to additional investors and advisors. Evan Luthra is by far one of the most knowledgable, results driven and strategic thinkers that I have had the pleasure to work with. His competitive nature and his ability to listen first, quickly process information and then provide potential solutions is something that has particularly impressed me. I look forward to building an even stronger relationship and having Evan Luthra in our corner as we build GameForm into a company that serves over 100 million players worldwide each year.Evan Luthra has become a true innovator and a recognized name in the world of Startups. Evan Luthra is now working on his entrepreneur venture of investing in ideas that are innovative, profitable and futuristic.
    Evan Luthra is also influencing the world through his social media handles. With over 500,000 followers he is always sharing bits of his life and words of wisdom to let the world know that Startup studio is there to listen to your extraordinary ideas.

    ReplyDelete
  60. THANKS FOR SHARE THIS AWESOME BLOG
    Evan Luthra has a great talented eye for investments and technology. Evan Luthra isn´t afraid of stepping outside of the box leading him to more interesting deals than what most investors are able to attract. With strong marketing skills and and ability to work faster than most people Evan Luthra has a unique competitive advantage!
    Although Evan Luthra invests in all kinds of tech projects, he focuses on blockchain projects as that sphere has become more of his specialization. Evan Luthra was instrumental in the success of blockchain projects like Relictum Pro, Crescent, and Relictum Pro.

    ReplyDelete
  61. Thanks for your helpful sharing. I have read that knowledge very much, it gives me a lot of things. learn to fly games

    ReplyDelete
  62. Howdy! This article could not be written any better! Going through this article reminds me of my previous roommate! He continually kept preaching about this. I most certainly will forward this post to him. Fairly certain he'll have a great read. I appreciate you for sharing!
    Roblox Login
    Amazon Gift Cards
    Free Google Play Codes
    Niter

    ReplyDelete
  63. The article you shared here is very good. This is really interesting information for me. Thanks for sharing!
    pillow covers farmhouse
    personalized christmas gifts

    ReplyDelete
  64. great article, I was very impressed about it, wish you would have stayed next share download lucky patcher apkxyz

    ReplyDelete
  65. Pwnie also wanted to beef up the Pwn Plug's hardware to meet other customer demands.

    this article

    ReplyDelete