Learn Kali Linux 2019

Exploiting XSS – hooking vulnerable page visitors to BeEF

BeEF is a security auditing tool used by penetration testers to assess the security posture, and discover vulnerabilities, of systems and networks. It allows you to hook a client browser and exploit it. Hooking is the process of getting a victim to click on a web page that contains JavaScript code. The JavaScript code is then processed by the victim's web browser and binds the browser to the BeEF server on Kali Linux.

For this exercise, we'll be using the following topology:

Let's start using BeEF to exploit XSS vulnerabilities:

1. To open BeEF, go to Applications | 08 – Exploitation ...