One of my favorite features of BeEF is the ability to use the victim as a proxy to send forged requests on behalf of the user:
- It's as simple as right-clicking the hooked victim to use as a proxy, navigating to the Rider tab, and using the Forge Request option, as seen in the following screenshots:
- Copy a known HTTP request to forge through the victim's browser, such as creating or changing an admin user's password, as seen in the following screenshot:
- View the forged response in the History ...