Friday, January 22, 2016

Hooked Browser Network with BeEF and Google Drive

Today's guest post is brought to you by:

Denis Kolegov (@dnkolegov)
Oleg Broslavsky(@ovbroslavsky)
Nikita Oleksov (@neoleksov)


Hello All. In this post, we present implementation of a hooked browser network based on BeEF and the Google Drive service.


First, we would like to introduce ourselves. We are researchers in the Information Security and Cryptography Department of Tomsk State University located in Tomsk, Russia.

Our team takes part in the BeEF project by sometimes developing experimental features. We implemented DNS and ETag covert timing channels modules and extensions, modules for attacking BIG-IP devices. Our ETag covert timing channels research took 10th place in the WhiteHat Security Top 10 Web Hacking techniques of 2014.


Now, let's talk about why we really need to communicate with hooked browsers via Google Drive and how we can implement it.
One day we read Christian "@xntrik" Frichot's post about his implementation of Hooked-Browser Meshed-Networks with WebRTC in BeEF. The main purpose of that technique is to avoid detection and tracking of post-exploitation communication of hooked browsers (zombies) with BeEF command and control server.

Christian's approach is based on using of Web Real-Time Communications (WebRTC) technology to mesh all those hooked browsers, funnelling all BeEF commands through a single sacrificial beach-head. The main drawback is that BeEF server still must communicate with this beach-head browser.

We propose to use an alternate approach against tracking of BeEF server and its communications with zombies.
The main idea is to use storage covert 
channel communications over known and popular cloud web services, for example Google Drive. Using these services as shared resources between BeEF server and hooked browsers can meet our need. In this case, there is no direct communication between BeEF server and zombies: All of them communicate only with Google API servers.
Conceptually, this approach is not new. There are other tools (e.g. Gcat and Twittor) that use known and trusted services as command and control servers. But, so far, no one has blogged to the BeEF blog about using Google Drive.

The current implementation of this extension requires the custom version of BeEF.

We are also planning to implement this extension for the main branch of BeEF without any restrictions or additional requirements.


We recently presented our research at the Zero Nights 2015 conference. The slides are here: http://www.slideshare.net/dnkolegov/zn27112015


Below is the video demonstrating how this feature works: 

The PoC is available on Github: https://github.com/tsu-iscd/beef-drive.

94 comments:

  1. Very interesting article and good information. if anyone need any help for Browser Just click here for the browser support.

    ReplyDelete
  2. Kite projects Is providing construction, Handrail Brackets,engineering and facilities management to provide edge protection, vertical access and hand railing solutions to Industries in United Kingdom!

    ReplyDelete
  3. I blog frequently and I really thank you for your information. The article has truly peaked my interest. I will book mark your blog and keep checking for new information about once per week. I opted in for your RSS feed too.telemetry nursing

    ReplyDelete
  4. Your blog post is just completely quality and informative related to traders hits.. Many new testimonials facts and information which I have not heard about before. Keep sharing more blog posts.

    ReplyDelete
  5. Hellos craze for acting started in lofty college, during by happen he walked by the tragedy group also saw the undergraduates acting love poultrys.commercial electrician perth

    ReplyDelete
  6. This comment has been removed by the author.

    ReplyDelete
  7. I liked the idea to use storage covert channel communications over known and popular cloud web services and also i liked video demonstrating how this feature works. thanks for sharing knowledge.
    Coursework writing service

    ReplyDelete
  8. Green Grid System Provides cellular confinement system specifically designed and sold for Geoweb Root Protection Geotextile .Call to know about Root Bridge System!

    ReplyDelete
  9. Pretty post ! Thank you so much for such a nice sharing True Healing Self Healing about google drive. 1st i was not know about google drive because i just use as search engine.

    ReplyDelete
  10. CleanVape™ Technology for E-liquids and e-juice flavors. Wholesale Vaping and private label e-juice and e-juice liquid nicotine.motologistica

    ReplyDelete
  11. Nice post.Very likely I’m going to bookmark your blog . You absolutely have wonderful stories. Cheers for sharing with us your blog. Compliant labeling

    ReplyDelete
  12. I hope they continue their research about BEef hooked browser network. Customer can buy here any of the extensions needed.

    ReplyDelete
  13. I have been searching for quite some time for information on this topic and no doubt your website saved my time and I got my desired information. Your post has been very helpful. Thanks.diamond tip bow ties

    ReplyDelete
  14. Thanks for Nice and Informative Post. This article is really contains lot more information about This Topic.texas website design

    ReplyDelete
  15. Great feat . I read your post and i want to say you shared with us very useful informative and post but in thinks as compares to others post this post is really awesome.. In the last just i say keep it up and share with us more post..short wavy bob

    ReplyDelete
  16. This is a smart blog. I mean it. You have so much knowledge about this issue, and so much passion. You also know how to make people rally behind it, obviously from the responses.Brazilian honeymoon packages

    ReplyDelete
  17. nice! thank you so much! Thank you for sharing. Your blog posts are more interesting and impressive. I think there are many people like and visit it regularly, including me.
    192.168.1.1

    ReplyDelete
  18. Kite Projects provides the best and cheap Bespoke Stainless Steel Handrails and Stainless Steel Ladders Provider in Uk. Call us now 01962 886290 to get information grp

    ReplyDelete
  19. I really needed the information that you gave PassBeeMedia on this topic because I had to finish my project on this topic and now I have completed it and I am gonna submit it.Resin Bound Permeable Paving

    ReplyDelete
  20. Your blog provided us with valuable information to work with. Each & every tips of your post are awesome. Thanks a lot for sharing.international money transfer

    ReplyDelete
  21. Official indenture is serious, effective, sagacious, plus longer. That is symbol numerous amateurs vision it fastidious extra the gymnastics of thesis peaks.dallas web design

    ReplyDelete
  22. First I dont understand why share this and now after reading this I know this is really helpful info shared with everyone.texas website design

    ReplyDelete
  23. I am really thankful to the owner of this website Video of Root Bridge who has shared this wonderful article at here.

    ReplyDelete
  24. Pretty article! I found some useful information in your blog, it was awesome to read, thanks for sharing this great content to my vision, keep sharing.
    Regards,
    JAVA Training in Chennai | Multimedia Training in Chennai

    ReplyDelete
  25. Thank you for this useful publish where else could anyone get that type of details in such an ideal way of composing and i was looking for more details.kurzy a školenia

    ReplyDelete
  26. Great article. I loved your use of words and examples. I can see that you are becoming a worthy author. Thank you for sharing such intimate feelings.dallas web developer

    ReplyDelete
  27. That was bit funny conversation. I could get an interesting topic to read through this article.transfer money abroad

    ReplyDelete
  28. Thank you for benefiting from time to focus on this kind of, I feel firmly about it and also really like comprehending far more with this particular subject matter. In case doable, when you get know-how, is it possible to thoughts modernizing your site together with far more details? It’s extremely useful to me.best way to transfer money abroad

    ReplyDelete
  29. Once you are well-informed about the real estate market and the selling process, selling your own home will become less stressfu.https://bowselectie.com/

    ReplyDelete
  30. Thank you for sharing This knowledge.Excellently written article, if only all bloggers offered the same level of content as you, the internet would be a much better place. Please keep it up!glyphicon

    ReplyDelete
  31. Really i appreciate the effort you made to share the knowledge.
    browser Help Number UK
    browser Helpline Number UK

    ReplyDelete
  32. This kind of specific present collects okay accomplishs along with smart large with regards to this kind of maze.car service from white plains Airport"HPN" TO CT

    ReplyDelete
  33. http://aborsi-tuntas.com/
    http://aborsi-tuntas.com/2017/03/05/jual-obat-aborsi/
    http://aborsi-tuntas.com/kontak-order-pemesanan/
    http://aborsi-tuntas.com/syarat-ketentuan/
    http://aborsi-tuntas.com/tentang-kami/
    http://aborsi-tuntas.com/testimoni-berhasil-tuntas/
    http://obat-aborsi-jakarta-bekasi.com/
    http://obat-aborsi-bandung-batam.com/
    http://obat-aborsi99.com/
    http://obat-penggugur.biz/
    http://klinik-wanitasehat.com/
    http://klinikfarma.com/
    http://klinik-aborsi.com/

    ReplyDelete
  34. This is a wonderful article, Given so toronto custom t shirts much info in it, These type of articles keeps the users interest in the website, and keep on sharing more.

    ReplyDelete
  35. You are the only one in this website who shares this great post with us. Thank you for sharing.80s Costumes

    ReplyDelete
  36. I really needed the information that you gave PassBeeMedia on this topic because I had to finish my project on this topic and now I have completed it and I am gonna submit it.vonage internet

    ReplyDelete
  37. I could get an interesting topic to read through this article. Thanks for the share about the scrambled eggs.refinance my home

    ReplyDelete
  38. This content is simply exciting and creative. I have been deciding on a institutional move and this has helped me with one aspect.best refinance home mortgage loan

    ReplyDelete
  39. Wow! Such an amazing and helpful post this is. I really really love it. It’s so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also font converter

    ReplyDelete
  40. With the demise of the Google Page Rank Toolbar, TRUST FLOW is the now the most important metric in SEO. Since 2013 Go-ogle has stopped publicly updating Page Rank, making high PR links worthless. Trust Flow has now takes its place and it shows the real authority that passes to your website, so your website gets rankings improvements on Go0gle pretty fast! High Trust Flow Backlinks

    ReplyDelete
  41. Great post! I am actually getting ready to across this information, is very helpful my friend. Also great blog here with all of the valuable information you have. Keep up the good work you are doing here.rodent pest control

    ReplyDelete
  42. http://klinikfarma.com/
    http://roommanis.com/
    http://obataborsi-ampuh.com/

    ReplyDelete
  43. articles that are very good and for the future I hope your article more useful thanks again.
    dewa poker

    ReplyDelete
  44. Regular practise and careful playing is required to be able to convey and evolve the different themes, rewarding you with that intimate instrument connection that we musicians lust for.cheap t shirts canada

    ReplyDelete
  45. I have read you post, Great work you really did it very well. Keep working like this and sharing informative posts like
    this one. keep it up. I'm waiting for your next post...
    refinancing your mortgage

    ReplyDelete
  46. I hope you will publish more informative articles and I will come up again Phd dissertation writing service

    ReplyDelete
  47. I have read your blog its very attractive and impressive. I like it your blog.
    Informatica Online Training
    ETL Testing Online Training
    Hadoop online Training

    ReplyDelete

  48. السلام عليكم ورحمة الله وبركاته اما بعد ، اهالي المنطقبة الشرقيه بالمملكة العربية السعوديه يسر شركة شام للخدمات المنزليه ان تعلن لجميع اهالي المنطقه عن بدأ تقديم خدماتها الخاصه بالمسابح للموسم الصيفي الجديد وذلك من خلال فروعا في مدينة الدمام ومدينة الخبر ومدينة القطيف ومدينة الجبيل ، واما عن فرعنا في مدينة الدمام فسوف تجدونه علي المتصفح تحت اسم
    شركة تنظيف مسابح بالدمام
    وايضا تحت اسم
    شركة صيانة مسابح بالدمام
    مقترنا برقم هاتف مندوبنا بالدمام لذل فللفحصول علي اي خدمه تخص المسابح تنظيفها او تشغيلها او صيانتها فليس عليك الا التصال بنا وسوف نصلك فورا ، واما اذل كنت من اهل مدينة الخبر وتحتاج الي ان تستفيد من خدماتنا في مدينة الخبر فسوف تجدنا علي المتصفح تحت اسم
    شركة صيانة وتنظيف مسابح بالخبر
    وفي هذا الفرع نسعد بتقديم كل الخدمات التي تخص المسابح لاهالي الخبر من خدمات تنظيف او صيانة او تشغيل برك السباحه ،ولاننا قد عملنا في شركة شام علي تغطية المنطقة الشرقيه كافه فقد حرصنا علي ان يكون لنا فرع في مدينة القطيف يختص بتقديم خدمات المسابح لجميع اهالي مدينة القطيف والذي سوف تجدونه علي المتصفح تحت مسمى
    شركة تنظيف وصيانة مسابح بالقطيف
    وهنا سوف تجدون كل ما يخص المسابح من خدمات تنظيف المسابح بالقطيف وصيانتها وتشغيلها ‘واما عن مدينة الجبيل فلنا ايضا هناك فرع يختص بتقديم خدمات المسابح لجميع اهالي الجبيل من تنظيف وصيانه وتشغيل وهذا الفرع سوف تجدونه علي المتصفح تحت اسم
    شركة صيانة وتنظيف مسابح بالجبيل
    بهذا اعزائي نكون في شركة شام قد استطعنا ان نغطي كافة انحاء المنطقة الشرقيه وتقديم كافة خدمات المسابح التي يحتاجها اهالي المنطقه باحدث الاساليب والطرق العلميه وباستخدام افضل مواد التنظيف واحسن اجهزة ومعدات الصيانه والتعقيم ، فلا تقلق عزيزي العميل ولا تحتار فشركة شام هي افضل اختيار .

    ReplyDelete
  49. Ask Free Question Related To Vashikaran Solutions, Black Magic Solution, Black Magic Removal, Inter Caste Love Marriage, Love Problem Solution, etc. We Are The Vashikaran Specialist Baba Ji. We Will Be Happy To Answer You Free Of Cost. Visit Our Website www.Lovevashikaranexpert.In Contact- +91 99157O7766

    ReplyDelete
  50. Basically, the technology essay replicates the structure and the main principles of a standard essay with a few peculiarities of its own.
    We offer you to study the procedure of writing the technology essays on a concrete example. Let's suggest your topic sounds something like "Influence of Modern Technology on Society". The goal of your custom essay is to describe and discuss complicated relations between technology and society. You are to clarify how some particular technology affects people. You are free to illustrate the influence on any sphere of modern life that your technology has affected most.

    First of all, people describe technology as ever-changing. Today new innovations become obsolete fast. People have become increasingly competitive and every year, new ideas and technologies are released to challenge the ones in the market. In a few months, a piece of technology can be released to the market and almost immediately rival companies will as well release theirs. Technological ideas keep getting unleashed as the world becomes more involved in exploring and utilizing the resources nature provides. Nothing seems to survive this fast paced world and unless one maintains the pace and moves with the wave, they get left behind..Read more about technology at ethics and technology

    ReplyDelete

  51. Thank you for sharing this information. And I want to share too some information
    topessayservices.com

    ReplyDelete
  52. I think things like this are really interesting. I absolutely love to find unique places like this. It really looks super creepy though!!
    Best Hadoop training in velachery

    ReplyDelete

  53. السلام عليكم ورحمة الله وبركاته اما بعد ، اهالي المنطقبة الشرقيه بالمملكة العربية السعوديه يسر شركة شام للخدمات المنزليه ان تعلن لجميع اهالي المنطقه عن بدأ تقديم خدماتها الخاصه بالمسابح للموسم الصيفي الجديد وذلك من خلال فروعا في مدينة الدمام ومدينة الخبر ومدينة القطيف ومدينة الجبيل ، واما عن فرعنا في مدينة الدمام فسوف تجدونه علي المتصفح تحت اسم
    شركة تنظيف مسابح بالدمام
    وايضا تحت اسم
    شركة صيانة مسابح بالدمام
    مقترنا برقم هاتف مندوبنا بالدمام لذل فللفحصول علي اي خدمه تخص المسابح تنظيفها او تشغيلها او صيانتها فليس عليك الا التصال بنا وسوف نصلك فورا ، واما اذل كنت من اهل مدينة الخبر وتحتاج الي ان تستفيد من خدماتنا في مدينة الخبر فسوف تجدنا علي المتصفح تحت اسم
    شركة صيانة وتنظيف مسابح بالخبر
    وفي هذا الفرع نسعد بتقديم كل الخدمات التي تخص المسابح لاهالي الخبر من خدمات تنظيف او صيانة او تشغيل برك السباحه ،ولاننا قد عملنا في شركة شام علي تغطية المنطقة الشرقيه كافه فقد حرصنا علي ان يكون لنا فرع في مدينة القطيف يختص بتقديم خدمات المسابح لجميع اهالي مدينة القطيف والذي سوف تجدونه علي المتصفح تحت مسمى
    شركة تنظيف وصيانة مسابح بالقطيف
    وهنا سوف تجدون كل ما يخص المسابح من خدمات تنظيف المسابح بالقطيف وصيانتها وتشغيلها ‘واما عن مدينة الجبيل فلنا ايضا هناك فرع يختص بتقديم خدمات المسابح لجميع اهالي الجبيل من تنظيف وصيانه وتشغيل وهذا الفرع سوف تجدونه علي المتصفح تحت اسم
    شركة صيانة وتنظيف مسابح بالجبيل
    بهذا اعزائي نكون في شركة شام قد استطعنا ان نغطي كافة انحاء المنطقة الشرقيه وتقديم كافة خدمات المسابح التي يحتاجها اهالي المنطقه باحدث الاساليب والطرق العلميه وباستخدام افضل مواد التنظيف واحسن اجهزة ومعدات الصيانه والتعقيم ، فلا تقلق عزيزي العميل ولا تحتار فشركة شام هي افضل اختيار .

    ReplyDelete
  54. you really contribute great things about security.will have an online writer write my essay for me about it

    ReplyDelete
  55. The subject of Philosophy and its subcategories have been widely discussed in both the Western and non-Western world albeit with different focuses. Philosophy includes many different subfields involving investigation into our existence. These subfields include epistemology, ethics, logic, metaphysics, philosophy of science, social and political philosophy, and Metaphilosophy. Epistemology focuses on the study of Knowledge, also known as “Theory of Knowledge”. Ethics involves the study of moral values and rules, Logic; the study of reasoning. Metaphysics is the study of being and knowing also known as the principles of reality. Read more at Philosophy essay

    One of the first points to be clear about is that a philosophical essay is quite different from an essay in most other subjects. That is because it is neither a research paper nor an exercise in literary self-expression. It is not a report of what various scholars have had to say on a particular topic. It does not present the latest findings of tests or experiments. And it does not present your personal feelings or impressions. Instead, it is a reasoned defense of a thesis.

    ReplyDelete
  56. Modern era like is currently, to get all the information we need can easily because many sites like this. So as the hunter information giving of thanks to the owner of the site.Trade in Phone

    ReplyDelete
  57. There was also a component of confusion here to. Would he be able to do these exciting things once again? Or never again?nose job orange county

    ReplyDelete
  58. I am very happy to be here because this is a very good site that provides lots of information about the topics covered in depth. Im glad to see that people are actually writing about this issue in such a smart way, showing us all different sides to it. Please keep it up. I cant wait to read whats next.B&B costa versilia

    ReplyDelete
  59. I'm experimenting with BeEF. And I'm able to hook on a browser of a PC which is on the SAME network. But as soon as I try to do it with a PC on another network, I can't get it to hook on. krogerfeedback.com

    ReplyDelete
  60. At the present time, Browser Exploitation Framework (BeEF) supports experimental WebRTC-based mechanism for implementing a hooked browser meshed-network. The main purpose of this solution is to avoid tracking post-exploitation communication back to BeEF command and control server. Liteblue

    ReplyDelete
  61. I'm very glad to find this site. keep sharing such kind of article.Thanks a lot. Must see here to explore this site. keep it up. html color codes

    ReplyDelete
  62. An interesting share, one that is expressive as well as providing a founding statement.location voiture agadir

    ReplyDelete
  63. Thank you for the great article I did enjoyed reading it, I will be sure to bookmark your blog and definitely will come back from again. I want to encourage that you continue your great job, have a good day.edit my paper

    ReplyDelete
  64. Thanks your posting. Your topic is very interesting, This is my link:Thanks your posting. Your topic is very interesting, This is my link:

    ReplyDelete
  65. Just like in brick and mortar stores you can also find discount shopping online as like anything else you can find anything you want with only a few clicks of the mouse. While the brick-and-mortar is a plus for getting outdoors it can also be inconvenient and stressful.Mi Band 3 Singapore

    ReplyDelete
  66. Great Article… I love to read your articles because your writing style is too good, its is very very helpful for all of us. Do check Six Sigma Training in Bangalore | Six Sigma Training in Dubai & Get trained by an expert who will enrich you with the latest trends.

    ReplyDelete
  67. I simply wanted to thank you so much again. I am not sure the things that I might have gone through without the type of hints revealed by you regarding that situation.
    offshore safety course in chennai

    ReplyDelete
  68. You truly did more than visitors’ expectations. Thank you for rendering these helpful, trusted, edifying and also cool thoughts on the topic
    safety course in chennai

    ReplyDelete
  69. Those who are roaming around, website to website in search of the right “computer science assignment help” Package that found a website. Who never imagined there existed more accurate and genuine Australian assignment help services. Many websites claim to be the number one, but my vote, undoubtedly lands into your account. After getting cheated by several other assignment providing companies, you know for sure, you buy assignment online or you can also found related topics assignment like java assignment help from sample assignment.

    ReplyDelete
  70. All Assignment Help is a web portal where students get help in making assignments for all the subjects, with the help of our experts. You will get 100% plagiarism free assignment. Expertes consultation is also available for students. If they have any query they can contact with our experts anytime.

    ReplyDelete