IoT Penetration Testing Cookbook

Introduction to using BeEF XSS payloads

BeEF is a tool that exploits web browsers and client-side attack vectors within a victim's environment via vulnerable application parameters as well social engineering techniques. BeEF will hook one or more web browsers when a victim has executed its payload where a number of command modules are available for further exploitation. This next section will expand on our discovered XSS vulnerability to have it execute a BeEF hook and then touch on some of the basic uses.

BeEF is powerful and demonstrates the impact of what an XSS is capable of:

1. Now that we have demonstrated how basic XSS payloads execute, we are going to kick it up a notch and try a BeEF payload with similar formatting as the last two ...