Learn Ethical Hacking from Scratch

Browser exploitation framework

Now, we are going to use a program called Browser Exploitation Framework (BeEF):

1. We're going to launch BeEF XSS Framework. It uses JavaScript code to hook a target computer; once a computer is hooked, we'll be able to run a number of commands. Following is a screenshot of how it looks:

2. To run the commands, we will use a man-in-the-middle attack to automatically inject the hook code for BeEF. We will use a tool called MITMf to perform an ARP spoofing attack. We will give it the network interface, gateway, and target IP address, which is the address of the Windows machine.
3. Next, we will tell MITMf that we want ...