Basics of using the Beef-XSS To Advanced + Bettercap!!

Поделиться
HTML-код
  • Опубликовано: 21 авг 2024

Комментарии • 300

  • @cuddenudd7697
    @cuddenudd7697 2 года назад +31

    This is scary asf.

  • @denisbalcanu
    @denisbalcanu 3 года назад +20

    Good job! I love how you explain everything! You are original! I like your content so much!

    • @HoxFramework
      @HoxFramework  3 года назад +3

      Thank you so much man! It means a lot.
      Im trying my best to provide good content as well as explainations - thats why i answer all of the comments and questions on discord - in hopes to make you guys understand more every time you visit :D

    • @nabeeltech7885
      @nabeeltech7885 2 года назад

      Bro my JavaScript is injected but beef is not showing online browser it show only when I open Apache html page please any views 😊

  • @jaihindjaibharat4431
    @jaihindjaibharat4431 2 года назад +6

    Bro you're great and also my favourite Pearson providing us the best knowledge

    • @HoxFramework
      @HoxFramework  2 года назад +1

      Thank you, means a lot!

    • @jaihindjaibharat4431
      @jaihindjaibharat4431 2 года назад

      @@HoxFramework bro do you have you paid cources or any other for beginners hacker RUclips does not allow such content

    • @HoxFramework
      @HoxFramework  2 года назад +2

      @@jaihindjaibharat4431 RUclips does allow such content - you just need to know what to look for. I've learned a big chunk of my knowledge from youtube/udemy/tryhackme/cybrary -all for free
      I dont have my own courses... I always tell my viewers it would be odd if i did since i usually share information for free and you can find anything you want to know on internet, so i cant recommend any specific course (but i did list some sites up)
      Hope that helps

  • @5entience626
    @5entience626 3 года назад +3

    Holy shit I've missed your videos dude, so excited to watch this!

    • @HoxFramework
      @HoxFramework  3 года назад +1

      This video is a sort-of-a reupload since yt took it down so i had to re-edit it and change some things for it to be back.
      Sorry I havent uploaded in some time (college reasons) ,but I've scheduled the next video to go public next week, as well as im editing one video rn. Tho the one im editing isnt about cybersecurity, but the one that will be released next week is. Thank you for your excitement! I hope you enjoy my content.
      Plus, Im giving away 3 more copies of the Hacknet game on steam - if you want one you can contact me on discord (just send me your steam name or something cause i have to add you as a friend to give it away)

    • @5entience626
      @5entience626 3 года назад

      @@HoxFramework I'll be looking forward to watching your new upcoming videos, I really enjoy your content and i don't really play games anymore tho so yea good luck to others with the giveaway :)

    • @HoxFramework
      @HoxFramework  3 года назад +1

      @@5entience626 Understandable, neither do I, but i have two steam accounts from before and some balance on them so i thought of giving something small away to people who might enjoy it - so hacknet came to my mind.
      Thank you for your support!

  • @user-dn3tn5kz5d
    @user-dn3tn5kz5d 5 месяцев назад +3

    No matter where in the HTML file I put my hook, it wouldn’t detect any device when I open the page on with it, any ideas what might need tweaking?

    • @ogleble
      @ogleble Месяц назад

      If you are using Brave you need to turn off the shield.

  • @thelasthope23
    @thelasthope23 2 месяца назад

    Great video mate 😊

  • @aaronaguilar2238
    @aaronaguilar2238 Год назад

    wowwwww... .you are the best person for me right now, Thank youu

  • @HoxFramework
    @HoxFramework  2 года назад +2

    Professor Volt commented: "hey, can you please talk FASTER?! I had to stop and rewind, like a thousand times! WTF change your dealer or cut down on the coffee man!"
    Hhahahahahahahah
    Nah dude i talk like this cause i dont wanna waste anyone's time
    I cover everything - so beginners can learn
    while i dont waste time - so pros can learn stuff that interests them without losing time
    Plus
    I like it like this
    No point on leaving gaps where you hear me breathing
    Plus if it really bothers you you have a slow down video option on youtube - But im assuming you dont wanna use it cause it makes it too slow? If so my point is proven, if not why not?

    • @danvasicek4122
      @danvasicek4122 7 месяцев назад

      I watch videos at 3x speed this one was possible only with 1.8

  • @Michael-rj2sc
    @Michael-rj2sc 7 месяцев назад +1

    I get taken to the apache page instead of the beef index page. How to fix this?

    • @HoxFramework
      @HoxFramework  7 месяцев назад

      i think beef index is at another port -or if you are talking about index.html you cloned from somewhere and you dont see that ?

    • @Michael-rj2sc
      @Michael-rj2sc 7 месяцев назад

      i just open the link that it provides when opening the site to the beef index page@@HoxFramework

  • @MohitKhare
    @MohitKhare Год назад

    Sorry to hear about your reupload, but anyway Thanks a ton.

  • @aadhityan1549
    @aadhityan1549 Год назад

    bro you great thanks this helped me thank god i saw your vid

  • @jissjose1382
    @jissjose1382 2 года назад +2

    Well explained for beginners.Hey make one about WAN beef using ngrok multtunnelling also.

    • @HoxFramework
      @HoxFramework  2 года назад +1

      I've added that idea to the list of videos, but its not in the top 10 so it might wait a bunch

    • @andresarredondo2762
      @andresarredondo2762 Год назад

      I used it with Blackeye and they blocked my account in ngrok 😢 haha

    • @okbasto6430
      @okbasto6430 Год назад

      @@andresarredondo2762 why did they block your account

  • @giusepperandazzo5357
    @giusepperandazzo5357 2 года назад

    better than some paid content! good job!!!!

    • @HoxFramework
      @HoxFramework  2 года назад +1

      Free is always better hehe
      Hope you enjoyed the video

    • @giusepperandazzo5357
      @giusepperandazzo5357 2 года назад

      @@HoxFramework it depends, If paying I am able to save my time, I prefer to pay. Because looking for free good quality contents requires at least our time ( time=money) . I enjoyed a lot your video :)

    • @HoxFramework
      @HoxFramework  2 года назад

      ​@@giusepperandazzo5357 i absolutely understand - what i like applying is (and this isnt for everyone, some people might dislike this) speeding up youtube videos
      So in case they are trashy i wasted a lot less time
      But in case they are good i learned something longer in a really short time

    • @HoxFramework
      @HoxFramework  2 года назад

      @@giusepperandazzo5357 but what i meant with my first comment was Linux (compared to win for example) xD

  • @cos20075
    @cos20075 2 года назад

    Reading package lists... finished
    Building a dependency tree... finished
    Read status information...
    E: The beef-xss package could not be located :Is there a solution please?

    • @HoxFramework
      @HoxFramework  2 года назад

      if you are using WSL there are a lot of cons to that - what distro are u using? Is it fully updated?
      You can try this github.com/beefproject/beef/wiki/Installation#installation

  • @ChandanKumarPERSONAL
    @ChandanKumarPERSONAL Месяц назад

    Unable to see other connected browsers at Beef-UI in a WAN

  • @leuekhpisdamati
    @leuekhpisdamati 11 месяцев назад +1

    It’s a very good video but the only problem is i cannot open that link on any other device than Linux,is there any solution for it?

  • @user-zj1pr3mc5b
    @user-zj1pr3mc5b 7 месяцев назад

    Bro is Pro

  • @chetangiri211
    @chetangiri211 2 года назад +2

    Hey Hox, lots of love and due respect...
    Is it possible to gain persistence even after victim closes browser?

    • @HoxFramework
      @HoxFramework  2 года назад

      thanks man it means a lot
      you could let the victim to download your malware and infect their machine (fake plugin example could help there)
      or do you mean persist it in the browser even after reset?

    • @chetangiri211
      @chetangiri211 2 года назад

      @@HoxFramework I mean persist on the browser

    • @HoxFramework
      @HoxFramework  2 года назад

      @@chetangiri211 While the browser is open yes, after its turned off im not sure, havent tried it

    • @chetangiri211
      @chetangiri211 2 года назад

      @@HoxFramework would you mind trying it on Android?
      It would be huge support ❤️❤️

    • @HoxFramework
      @HoxFramework  2 года назад

      @@chetangiri211 I dont plan on doing another Beef-XSS video since i've done two already, but i can add it to my list and consider doing it some time later if you want

  • @knowere5086
    @knowere5086 Год назад +1

    whats the username for beef?

    • @HoxFramework
      @HoxFramework  Год назад

      i think its "beef" with password "beef"

  • @abhisheksundar7506
    @abhisheksundar7506 2 года назад

    I am getting this error how to solve
    System has not been booted with systemd as init system (PID 1). Can't operate.
    Failed to connect to bus: Host is down
    System has not been booted with systemd as init system (PID 1). Can't operate.
    Failed to connect to bus: Host is down

    • @HoxFramework
      @HoxFramework  2 года назад

      Something might have happened to your SystemD or something requires it and you dont have it (which is less likely)
      It has nothing to do (it seems) with the programs - but what it could be is that one of the software requires a system with SystemD - so if you are on (for example) arch system without systemD you wont be able to run it
      But again i dont think that SHOULD be the case, so try googling it and let me know how it goes

  • @PratyakshaBeri
    @PratyakshaBeri 3 года назад +1

    Hi, I loved this video but there is a little problem. The audio is towards the left speaker, and that is a bit annoying, please fix it... Maybe you recorded on stereo. You can just put the audio in audacity and split to mono, and it would fix it, Very Informative video tho, :))

    • @HoxFramework
      @HoxFramework  3 года назад +1

      Oh snap! I didnt even notice that!
      I actually used my microphone and it should have been centered which is odd - i even recorded 2 more videos with that microphone ... But its not a problem, I have an idea which i think should work to fix that problem! So thank you so much for pointing this out! Also if you want a free copy of "Hacknet" game on Steam you can contact me on Discord - im currently giving away 3 more copies.
      Anyways thanks a lot man

    • @PratyakshaBeri
      @PratyakshaBeri 3 года назад

      @@HoxFramework No problem bro, I don't really play games, but would love to know if there is a trick or something!
      Love your videos

    • @HoxFramework
      @HoxFramework  3 года назад

      @@PratyakshaBeri Thanks a lot man

  • @MohitKhare
    @MohitKhare Год назад

    btw, at 0:43 when you launched your terminal i saw kali's logo as ASCII art. how can i achieve that, i also have parrot & ubuntu. Appreciate your efforts.❤

    • @HoxFramework
      @HoxFramework  Год назад

      The tool in question is "neofetch"
      You can also use a less colorful version "superfetch" if you prefer simplicity.
      Or you can make it completely colorful by combining neofetch and lolcat :)
      Thanks a bunch!

    • @MohitKhare
      @MohitKhare Год назад

      ​@@HoxFramework Will surely check them out. Thanks a lot man, appreciate your hard work and knowledge. SO GLAD I FOUND YOUR CHANNEL.

  •  7 месяцев назад

    Hi, How do you get to the download page with the index because I don't have the same as you how to do it ?

  • @ajinkyakothavade5350
    @ajinkyakothavade5350 2 года назад +1

    Password of beef????

  • @user-dt8cr3is8b
    @user-dt8cr3is8b 6 месяцев назад +1

    I would have appreciated more explanation on the network side and how to initially import the html because you have to save and move it with a different folder. sudo mv * /var/www/html with an empty folder with the .html saved to get the spoofed page. But when I tried to do it on my host machine and not just the same vm the apache2 website timed out. Would have appreciated a more realistic demo because of course it's going to work within the same vm.

    • @HoxFramework
      @HoxFramework  6 месяцев назад

      The only thing more realistic than this would be hosting it worldwide
      Doing that is a no-no according to the law
      If you mean just locally tho then it should be as simple as allowing your VM to take part in your real network
      I assumed most people knew linux and networking pretty well before going into these kinds of vids- not saying you dont, just saying some things were implied. ((I know you'd say thats not a great way to teach but to be fair i cant cover everything - nor can i remember everything xD))
      Either way I am sorry about the misunderstanding, I'll try to be more clear in the future videos - I do make them longer now in order to cover more than just the topic, to go into detail more...
      Also if you still need help let me know. I dont mean to discourage anyone from learning.
      Apologies, again

  • @optimizo
    @optimizo 10 месяцев назад

    Dope

  • @masterblackarmy10000
    @masterblackarmy10000 6 дней назад

    hey a question if i execute js on the webpage victim is it gona have a high previlige like the previlege of extensions? fake user interaction and still the browser counts it as a istrusted event

    • @HoxFramework
      @HoxFramework  12 часов назад

      javascript executes in the browser, if you get a shell - then yes probably you are on a user-level

    • @masterblackarmy10000
      @masterblackarmy10000 11 часов назад

      @@HoxFramework what do you mean if i get a shell?

  • @mareklorincz531
    @mareklorincz531 2 года назад

    Hey there, i did all thinks right, i was following your steps, but the WEB UI link doesnt work. it show me this:
    System has not been booted with systemd as init system (PID 1). Can't operate.
    Failed to connect to bus: Host is down
    and this:
    [i] GeoIP database is missing
    [i] Run geoipupdate to download / update Maxmind GeoIP database
    thanks for any help :)

    • @HoxFramework
      @HoxFramework  2 года назад

      Something seems to be wrong with your systemd - which is used by the system to (long story short) organize a bunch of stuff and make a bunch of stuff possible - id honestly recommend you to reinstall kali (or whatever distro ur running) cause thats (unironically) the easiest way
      Are you using WSL ? Cause on WSL this is a common issue
      GeoIP database shouldnt be a problem - to be honest if you get the IP you can just use free ip location lookups online

  • @giomieramores
    @giomieramores 4 месяца назад

    The beef is command

    • @HoxFramework
      @HoxFramework  4 месяца назад

      what do you mean with that comment

  • @giftonpaulimmanuel146
    @giftonpaulimmanuel146 Год назад +1

    I have many questions to ask.
    1) Why are we using the bettercap tool with beef?
    2) Why won't the hook link work with anyone other than my own device?
    3) How can I hook anyone outside my own internet ?
    4) Can we modify the hook url by any chance so that it looks decent?
    5) Can this exploit be traced by any chance?
    btw, thank you :)

    • @HoxFramework
      @HoxFramework  Год назад

      - Cause bettercap mitm-s and beef hooks
      - it will, you gotta know some networking. If someone is in your internal network you will be able to hook them. If they are outside then you need some sort of a bridge - like maybe ngrok to your website which has the hook inside
      - Just answered that up there. But to be fair you DO have to keep it legal, i dont support illegal activities. Bettercap is not needed if you are going worldwide - only in your internal network if you wanna hook others
      - You dont have to modify the hook url since it can be in website's code. It refers to a JS file
      - Its not an exploit, but yes more or less everything can be traced - if u used a DDNS service of sorts and signed up for it with a VPN then maybe you'd be safe but even then its questionable what kinda results would you have and what kinda info would you be able to extract - again, KEEP IT LEGAL.

    • @giftonpaulimmanuel146
      @giftonpaulimmanuel146 Год назад

      @@HoxFramework thank you sir

    • @rush1119
      @rush1119 Год назад

      @@HoxFramework So im using an Alpha adapter, i installed drivers and everything its working fine. but im trying to connect to my wifi network so i can test out beef on my desktop as host. But when i try to connect to wifi it doesnt work and just freezes my kali pretty much. (ex. im unable to view iwconfig or ifconfig (anything)
      if you can help any way that would be awesome:) ty

    • @HoxFramework
      @HoxFramework  Год назад

      @@rush1119 Thats really odd behaviour, it definitely shouldnt happen. Are using the latest version of kali ? Can you run any other commands at all? Did you forward the Adapter to the VM (if you are using one)?
      Thats really odd i gotta admit

    • @rush1119
      @rush1119 Год назад

      @@HoxFramework not sure what you mean by forwarding the adapter.
      -i plugged it in the laptop installed drivers -and updated && upgraded.
      -run it as usb where the device tab is..
      -it works to sniff nearby wifi but when i go to connect to one it just gives me a loading wheel where it displays internet on kali.. im trying to connect to my home wifi so i can be on the same network to use my desktop as a lab

  • @criticallydumb660
    @criticallydumb660 2 года назад

    I try to open beef website but it says system cannot operate because init system (PID 1) can’t operate. Failed to connect to bus: host is down

    • @HoxFramework
      @HoxFramework  2 года назад

      2 options:
      follow this answer:
      askubuntu[[.]]com/questions/1379425/system-has-not-been-booted-with-systemd-as-init-system-pid-1-cant-operate
      (remove [[ ]])
      OR
      Run your kali from a virtualbox VM
      (since im assuming you are running WSL)
      (or you could just reinstall your kali - which id recommend, your error seems to be tied to systemd or similar - without it system works poorly and it doesnt seem to start right on your system

  • @chowdhuryrifat8527
    @chowdhuryrifat8527 12 часов назад

    why the admin panel dont open ?

  • @masterblackarmy10000
    @masterblackarmy10000 Год назад

    is there a way to make them still hooked even if they close the browser and when they open it again they get hoocked ? something like a start up persistence

    • @HoxFramework
      @HoxFramework  Год назад

      there are ways, i dont exactly remember - i think they are even built in the beef-xss
      But if they aren't you can just code them yourself, since injecting custom js is allowed

  • @kira6198
    @kira6198 Год назад

    is that working for external network ? what if i'm using port forwarding setup in my router to my external ip adress ? like redirect victim to my external ip adress (router ) then router will redirect the victim to my machine plz i want some inswers and good luck

    • @HoxFramework
      @HoxFramework  Год назад +1

      MITM is mostly for your own network. thats what its made for. Its really really unlikely you'll go above that - it would mean you'd have to be able to arp spoof your ISP or whatever -good luck with that- what i mean to say is this wont work
      As far as beef xss goes that might be aplicable to someone outside of your network id say - but i never tried that because its illegal and pentests dont require me to do that kind of testing-

  • @ajinkyakothavade5350
    @ajinkyakothavade5350 2 года назад +1

    I tried beef and beef but it's wrong

    • @HoxFramework
      @HoxFramework  2 года назад +1

      beef and beef are default creds, you must have changed them
      you can change the password (if i remember correctly) in /usr/share/beef-xss (or wherever your beef-xss is) inside config.yaml - there you should see Credentials

  • @ccc-mp3hq
    @ccc-mp3hq 3 года назад

    dont stop your magic you'r soo goooooooooooooooood

  • @repotrain9309
    @repotrain9309 Год назад

    the online version of my beef isn't working, each time i put the username and password, it loads a bit and stops. and can i get the targets browsing history with BEeF?

    • @HoxFramework
      @HoxFramework  Год назад

      im not sure what you are saying
      Check if you arp spoof works at all for your network - does it capture HTTP packets (Not https, http!) - you can check with wireshark after running bettercap and arpspoof in it
      Im not sure about the browsing history, i think it could be possible but i havent tried

  • @ggquack8176
    @ggquack8176 Год назад

    Any idea why my beef isn’t working. I run it in a linode server. The link works like it is meant to for example I get the information about the drive that clicked such as browser engine and so forth. However the commands do not work at all when I send them nothing comes up on the other computer. Any help would be appreciated!!!!!

    • @HoxFramework
      @HoxFramework  Год назад

      Are you testing the commands on yourself? Test it on yourself first, see if that works - maybe your victim disconnects from the tab. I mentioned that (initially) beef works only on that tab the victim is on - in combination with bettercap this can be more efficient, but the best way would be to use beef to auto-spread in any way you can (there are some commands that can help you with this, you should find a way to auto-run them)

    • @ggquack8176
      @ggquack8176 Год назад

      @@HoxFramework thanks for the response man I finally got it sorted and yes I was testing it in myself

    • @HoxFramework
      @HoxFramework  Год назад

      @@ggquack8176 Glad to hear that bro

  • @swiftreviewskicks
    @swiftreviewskicks Год назад

    why doesnt my hook url work on other peoples browsers like google etc, it only works on my kali linux browser.

    • @HoxFramework
      @HoxFramework  Год назад

      probably because you are using your local IP

  • @sherafati
    @sherafati 3 года назад

    once the target closes the infected tab, you get unhooked, how to overcome that?

    • @HoxFramework
      @HoxFramework  3 года назад +2

      BEEF has ways of hooking the machine further, you could hook it to other tabs there is even a function for that - i mentioned this in the video
      Also what you could do is start bettercap for every http website and just inject the JS script that connects beef with it - that helps
      you can also pop up a warning box if the victim attempts to quit the browser
      You could also automate things with The Autorun Rule Engine (ARE) (github[.]com/beefproject/beef/wiki/Autorun-Rule-Engine)
      I hope this helps

  • @martingerson5480
    @martingerson5480 2 года назад +1

    Hey man it s a great content. But I have a problem. When victim pc uses chrome or edge my hook going offline it stays in online only if victim pc uses internet explorer. Do you know how to fix that?

    • @HoxFramework
      @HoxFramework  2 года назад +1

      If the person leaves the browser tab (where they got hooked) (and if you didnt hook them further) then it will go offline
      as i mentioned some browsers (especially if updated) will prevent some of Beef's actions
      So internet explorer might be considered as older, but i've shown that it CAN work on firefox and chrome you just have to be lucky and the victim has to be unlucky or have an older version of the browser or just visit http sites where your hook is and not get interrupted by their browser defending them

    • @martingerson5480
      @martingerson5480 2 года назад

      @@HoxFramework Ok thank you.

    • @BelkEpizy
      @BelkEpizy 4 месяца назад

      @@HoxFrameworkhow do you hook them further?

    • @HoxFramework
      @HoxFramework  4 месяца назад

      @@BelkEpizy I mentioned in the video that there are SOME persistence methods but its probably not gonna be perfect
      tbh if you want real persistence your best bet is probably to compromise the pc
      legally.

  • @Unknown_anonymous33
    @Unknown_anonymous33 Месяц назад

    Its saying this:
    System has not been booted with systemd as init system (PID 1). Can't operate.
    Failed to connect to bus: Host is down
    System has not been booted with systemd as init system (PID 1). Can't operate.
    Failed to connect to bus: Host is down
    and the my browser its showing this:
    This site can’t be reached
    127.0.0.1 refused to connect.
    Try:
    Checking the connection
    ERR_CONNECTION_REFUSED
    I tried to post this to beef issues in github idk my os is mobile
    I use UserLAnd to boot up kali

    • @HoxFramework
      @HoxFramework  Месяц назад

      Yeah that means you arent using SystemD - which is usually behind most debian-based systems
      im assuming u've modified your kali not to use systemD?=

  • @Musica-Lyrix
    @Musica-Lyrix 11 месяцев назад

    prejebeno 😎👍

  • @asawski
    @asawski 2 года назад

    good job, thx

  • @user-vj8dv1ms1h
    @user-vj8dv1ms1h 6 месяцев назад

    🎉🎉

  • @jeanpc9174
    @jeanpc9174 2 года назад

    I want to put mi .exe file in the folder but it does not work for me, it is like Beef is the localhost and not the apache2. can you help me please?

    • @HoxFramework
      @HoxFramework  2 года назад

      Beef is by default on the localhost - if you wanna make sure it works on apache you need your hook on the apache server's site (var www html thing i mentioned in the video)
      I dont understand what you mean with the exe
      if you want to inject an exe using scripts from beef first you need to establish a beef hook
      Let me know if that helps!

  • @thesailor9059
    @thesailor9059 Год назад

    hello i hawe kind of problem with that when i write command for starting appache2 it does nothing
    pls any help ?

    • @HoxFramework
      @HoxFramework  Год назад

      run:
      service apache2 status
      to see if its running

  • @itszme8912
    @itszme8912 7 месяцев назад

    Real information and scary, is it important to send this link in a same LAN ?, like can I send this to some one not in my network?

    • @HoxFramework
      @HoxFramework  7 месяцев назад

      If you wanna go outside your network you'd have to use something like ngrok or whatever
      ideally a paid hosting server or if you wanna stay more hidden noip or smthn
      That being said please keep things legal.

    • @itszme8912
      @itszme8912 7 месяцев назад

      @@HoxFramework thanks for the information ℹ️

    • @skrublord99
      @skrublord99 2 дня назад

      @@HoxFramework hey i know this was years ago but do you need to do port forwarding to send this to other networks?

    • @HoxFramework
      @HoxFramework  12 часов назад

      @@skrublord99 bettercap doesnt work on other networks as far as i know its a mitm-kinda tool
      Beef on the other hand - i assume so

  • @IAM_ZX
    @IAM_ZX 2 года назад

    heyyyy hox this is probably just my mistake but when i open my ui panel its stuck at a white screen how do i fix that

    • @HoxFramework
      @HoxFramework  2 года назад

      Thats odd - i havent faced an issue like that
      There can be two fixes - if its beef's fault then just reinstall it (trust me thats the easiest way)
      However what could also happen is you didnt navigate to beef instead you navigated to some blank page - make sure its the beef URL
      (but since im assuming that isnt the case ill go ahead and recommend a reinstall)
      Also
      Perhaps you mean when entering a different IP ? Like if you are going wider than locally? Maybe that could be the case
      Reply with more info if this doesnt help

  • @scytherunsyou
    @scytherunsyou Год назад

    When I try Opening my Beef link on a different browser that isn’t kali Linux it doesn’t load for me. Is Beef only got kali? Or I’m I doing something wrong?

    • @scytherunsyou
      @scytherunsyou Год назад

      Also When I put my Script code into my website and I upload to my website, the actually website loads while the script doesn’t inject and doesn’t pop up on beef

    • @HoxFramework
      @HoxFramework  Год назад +1

      Yes because beef is hosted on your localhost from what I know,
      you can try accessing via your internal ip maybe since the listening is acting like a server probably - but keep in mind that the machines should be on the same network

  • @sudosupsudo1528
    @sudosupsudo1528 Год назад

    Dude love your content but omg the keyboard sounds give me anxiety lol

    • @HoxFramework
      @HoxFramework  Год назад

      Hhahahhahah
      some people seem to like it
      but either way in newer vids there is no keyboard sounds :)

  • @raulmarin2276
    @raulmarin2276 3 года назад

    Do you know what could cause the issue of Bettercap now detecting my gateway??

    • @HoxFramework
      @HoxFramework  3 года назад

      maybe your VM's network settings arent well set up, or you didnt provide the right interface when running bettercap

  • @michaelcarraz1393
    @michaelcarraz1393 10 месяцев назад

    Great stuff! I listened at 1.5x speed because the pace is too slow.

    • @HoxFramework
      @HoxFramework  10 месяцев назад +1

      Legendary move bro, respect.

  • @SrWlt
    @SrWlt 5 месяцев назад

    There's a way to know if my browser got hooked? Nice vid

    • @HoxFramework
      @HoxFramework  5 месяцев назад

      You'll see it in the list of victims on beef

  • @giomieramores
    @giomieramores 4 месяца назад

    You need a server to combine the msfvenom to control😊

  • @joebonny7462
    @joebonny7462 2 года назад

    how do i remove a hooked browser and will it leave files on my computer if i hook my own browser

    • @HoxFramework
      @HoxFramework  2 года назад

      You can unhook the browser from the beef interface (website on 127.0.0.1) - its a simple click, not sure where but you can easily figure that out (maybe right-click the victim's ip and see whats there)
      As for will the files stay - what do you mean - if you downloaded something from victim PC - yes.

  • @cvport8155
    @cvport8155 Год назад

    Please make vd for pivoting and advanced techniques red team and more tools for CyberSecurity advanced

  • @aki-fi3gk
    @aki-fi3gk Месяц назад

    How do you allow BeEF to access devices outside of your LAN?

    • @HoxFramework
      @HoxFramework  Месяц назад

      Havent tried, probably requires some port forwarding or a DDNS or whatever
      But bettercap is focused on your network anyway so this doesnt make much sense, unless you wanna run beef on its own

    • @aki-fi3gk
      @aki-fi3gk Месяц назад

      Yes i ve been trying to run beef on its own​@@HoxFramework

  • @mwa_aa9735
    @mwa_aa9735 2 года назад

    When I put the inet website in it puts me in another website and it dosent show it please help

    • @HoxFramework
      @HoxFramework  2 года назад

      Im not exactly sure what you are saying - what do you mean "puts me in another website" and "it doesnt show" ?

  • @shubhamchauhan3042
    @shubhamchauhan3042 7 месяцев назад

    how to hook beef url to a victim's device?

    • @HoxFramework
      @HoxFramework  7 месяцев назад

      I've said it in the video
      Its either by visiting the site that has the hook injected - or the same thing but with some mitm

  • @rizzle97
    @rizzle97 2 года назад

    beef browser ui never opens for me on any browser, strange.

    • @HoxFramework
      @HoxFramework  2 года назад

      you can try entering it manually
      or do you mean the site wont load?
      are you entering on a correct port and host?

  • @NarutoUzumakiVSuchiha
    @NarutoUzumakiVSuchiha Год назад

    For me it won’t open it in google

  • @CurbEater
    @CurbEater 10 месяцев назад

    What Linux version are you using? Linux Lite?

    • @HoxFramework
      @HoxFramework  10 месяцев назад +1

      Kali Linux

    • @CurbEater
      @CurbEater 10 месяцев назад

      @@HoxFramework Thanks, I will create a vm!

  • @Ken-ik6xu
    @Ken-ik6xu 2 года назад

    hey bro i need help i accidently set a password and i dont remember the password how do i check my password or how do i reinstall beef-xss? please help me

    • @HoxFramework
      @HoxFramework  2 года назад

      Your kali password? I think you can change it on boot (www.javatpoint.com/kali-linux-root-password-reset)
      As for reinstalling beef i assume you can do it using apt
      apt-get remove beef-xss
      you can also do purge

  • @AnonymousExploit0
    @AnonymousExploit0 4 месяца назад

    Your better cap method is cool but won't work I'm a real sanario not that we would want it to buy for the purpose of testing. This won't work remotely of course. If your on the same network you might be able to force http but usually it doesn't work anymore even if you gain access to the router and change the settings to use http instead of HTTPS it just defaults to HTTPS on every website like Facebook etc

    • @HoxFramework
      @HoxFramework  4 месяца назад

      I mentioned all of that in the video
      I didnt mention going worldwide with this
      But good of you to point out, thanks

  • @nironrecords457
    @nironrecords457 2 месяца назад

    Hey Hox, beef-xss is the same with beef?

    • @HoxFramework
      @HoxFramework  Месяц назад

      beef xss and beef are the same thing yes, i just say "beef" cause i dont wanna have to say xss every time

  • @true_riddles
    @true_riddles Год назад

    I am not able to hook as it internet doesn't give permission

    • @HoxFramework
      @HoxFramework  Год назад

      im not sure what you mean by "internet"

  • @M4r40
    @M4r40 Год назад

    Kralju istog sekunda kad sam video da si nas odma sub :D

  • @dedsec1175
    @dedsec1175 2 года назад

    Can you update the tutorial coz it aint working anymore

  • @sweetboy1812
    @sweetboy1812 2 года назад

    i didnt understand. Who is the target?

    • @HoxFramework
      @HoxFramework  2 года назад

      The network you are in - im using my adapter meaning whoever is in my network
      (You could specify a custom victim as well if you wanted to)
      The idea of this is to be an advanced MITM attack

  • @veroxsity2336
    @veroxsity2336 Год назад

    i cant get the beef script to work in a web page, how does it work?

    • @HoxFramework
      @HoxFramework  Год назад

      make a html page and in it put script tags, make sure that the victim can access beef - thats why you dont reference 127.0.0.1 or localhost -noone can reach that but you
      You need to make sure you beef resources can be reachable
      Meaning if the victim is in the same network put your internal IP and beef hook's port and location
      I mentioned all of this in the video tho
      im not sure what doesnt work for you specifically
      and what you have done about it

    • @veroxsity2336
      @veroxsity2336 Год назад

      @@HoxFramework I have the script in the head tag of the website, but it isn't hooking any connections

    • @HoxFramework
      @HoxFramework  Год назад

      @@veroxsity2336 than either your IP is wrong or the site cant reach that IP

  • @3nvymm2
    @3nvymm2 3 года назад +1

    i cant hook anything outside of my vm to beef. I can hook my firefox to beef inside kali, and chromium, just not anything on my windows 10 pc.
    This site can’t be reached10.0.2.15 took too long to respond.
    Try:
    Checking the connection
    Checking the proxy and the firewall
    Running Windows Network Diagnostics
    ERR_CONNECTION_TIMED_OUT

    • @HoxFramework
      @HoxFramework  3 года назад

      You didnt set up your VM's network settings right, try bridging your adapter :)

    • @davidvideos1359
      @davidvideos1359 2 года назад

      @@HoxFramework I bridged my adapter and it does not work

    • @HoxFramework
      @HoxFramework  2 года назад

      @@davidvideos1359 Something must have went wrong, but in the end all you need is your attacker machine to be in the same network as victim machines - so try some combinations
      I even used an external adapter that i passed trough as an USB - then used it to connect to my own wifi
      or you can ping your machines to see if they get pinged
      Hope that helps

    • @rush1119
      @rush1119 Год назад

      @@HoxFramework So im using an Alpha adapter, i installed drivers and everything its working fine. but im trying to connect to my wifi network so i can test out beef on my desktop as host. But when i try to connect to wifi it doesnt work and just freezes my kali pretty much. (ex. im unable to view iwconfig or ifconfig (anything)
      if you can help any way that would be awesome:) ty

  • @Hellohellohello803
    @Hellohellohello803 9 месяцев назад

    Now I know how to hack my girlfriend. Thanks! 😂

  • @JekiCennn
    @JekiCennn 10 месяцев назад

    Why i didnt get into index of / pls tell me im new

  • @CurbEater
    @CurbEater 10 месяцев назад

    Hello buddy...😅
    I kinda don't know my user or my password. You know how I can change it?
    (Btw, I aprreacite you still answering instantly after 2 years.)

    • @HoxFramework
      @HoxFramework  10 месяцев назад

      Hey man
      Im not sure
      i never needed to change the password
      but i've just googled it:
      the username/password are set in the config.yaml file. Check for the line with 'credentials:' on it.
      sudo nano /usr/share/beef-xss/config.yaml
      (or something similar)
      Thanks!

  • @z2.060
    @z2.060 2 года назад

    I think i got hcked 😭 i clicked on a link that i received from an unknown phone number but i exited after about 1 minute (just visited the website, didn't do or enter anything), how can i know if i got hackd 😭🙏 what happens exactly when i access the link, do the hackr have full control of my phone, please help 🙏😭

    • @HoxFramework
      @HoxFramework  2 года назад +1

      Check with an antivrirus, look at your incomming/outgoing connections and see if anything was installed on that date
      Depends on what kinda link, cant tell
      Try contacting your national CERT too

    • @z2.060
      @z2.060 2 года назад

      @@HoxFramework it's a shorten url 😭
      please tell me, can he get full access of my phone ?

    • @z2.060
      @z2.060 2 года назад

      @@HoxFramework what can he install on my device ? js files ? how could they run automatically ?

    • @z2.060
      @z2.060 2 года назад

      @@HoxFrameworkplease how can i look to my incoming/outgoing connections and see if anything was installed on that date ?

    • @HoxFramework
      @HoxFramework  2 года назад +1

      @@z2.060 I cant tell you that since i dont know what kind of URL is he using. Hypothetically he could if you downloaded something - if you just visited a URL it should be fine if you leave it soon enough, again - depending on whats on it. There is a wide range

  • @jimgrayson4828
    @jimgrayson4828 Год назад

    how do we create an https hook and hook the network when doing https attacks using bettercap

    • @HoxFramework
      @HoxFramework  Год назад

      I dont think you can
      As far as https traffic monitoring goes look up mitmproxy

    • @jimgrayson4828
      @jimgrayson4828 Год назад

      @@HoxFramework I figured out a way to be honest to create the https hook but what do you mean hox I know what mitmproxy is but how would I sslstrip using mitmproxy whaaaaat that’s possible

    • @HoxFramework
      @HoxFramework  Год назад

      @@jimgrayson4828 If you install a certificate on the victim's pc you should technically be able to monitor https traffic without ssl stripping
      Thats what mitmproxy is most useful for

    • @jimgrayson4828
      @jimgrayson4828 Год назад

      @@HoxFramework how would I do that in transparent mode though

    • @HoxFramework
      @HoxFramework  Год назад

      @@jimgrayson4828 Transparent mode? What do you mean

  • @belkYT
    @belkYT 4 месяца назад

    is there a way I can put this on a custom domain so if anyone clicks that custom domain link they get hooked?

    • @HoxFramework
      @HoxFramework  4 месяца назад

      bettercap works within your network
      but beef - probably idk

    • @belkYT
      @belkYT 4 месяца назад

      @@HoxFramework nvm I deployed beef using ngork and I pasted the beef script into the custom domain and I hooked my friend

    • @HoxFramework
      @HoxFramework  4 месяца назад

      @@belkYT Do keep in mind that thats illegal, i hope you had permission from your friend

    • @belkYT
      @belkYT 4 месяца назад

      @@HoxFramework It doesnt even really hack your web browser, all it does is "hack" the tab that youre on. The worst thing that it does is setting up a phishing site that someone can fall for, and steal all info relating to your device including your IP Address. It is really only damaging if youre injecting the script into websites, maybe via XSS (Cross-site scripting). Also Man in the middle attacks where youre injecting the script onto every website for the person, and stealing all the cookies. But thats it, it doesn't do a whole lot of damage lol. All you have to do is simply exit out of the tab.

    • @belkYT
      @belkYT 4 месяца назад

      @@HoxFramework It doesnt even really hack your web browser, all it does is "hack" the tab that youre on. The worst thing that it does is setting up a phishing site that someone can fall for, and steal all info relating to your device including your lP Address. But thats it, it doesn't do a whole lot of damage lol. All you have to do is simply exit out of the tab.

  • @mayhem1994
    @mayhem1994 2 года назад

    like how to get the html files into the var file

    • @HoxFramework
      @HoxFramework  2 года назад

      var is a folder
      /var/www/html
      are all folders
      you need to copy a file into the html folder
      which is inside www, which is inside var
      You are gonna have to know the basics of basics of using linux in order to do stuff like this

  • @ShotYoNer
    @ShotYoNer 2 года назад

    Can you do this on windows?

    • @HoxFramework
      @HoxFramework  2 года назад

      probably but the setup would be a pain in the a$$, unless u mean VMs

  • @ClaymorePvP
    @ClaymorePvP 2 года назад

    sudo: beef-xss: command not found

    • @HoxFramework
      @HoxFramework  2 года назад

      it means you need to install beef
      Find a tutorial online and follow it
      From what i've gathered you can probably install it with apt
      Older distroes came with beef pre-installed.

    • @davislavon6197
      @davislavon6197 11 месяцев назад

      cd /usr/share/beef-xss

  • @random0619
    @random0619 Год назад

    When I try to open the web ui it doesn’t let me?

    • @HoxFramework
      @HoxFramework  Год назад

      There seems to be something off with your installation. Are you sure you are visiting the right port?

    • @random0619
      @random0619 Год назад

      @@HoxFramework im pretty sure

    • @random0619
      @random0619 Год назад

      Before it sends the link it says „system has not been booted with systemd as unit system (pid 1) can’t operate. Failed to connect to bus: host is down

    • @random0619
      @random0619 Год назад

      Ignore the random quotes

    • @HoxFramework
      @HoxFramework  Год назад

      @@random0619 are you using non-debian based systems?
      Like the ones that dont have systemd
      and also are u using WSL ?

  • @user-vj8dv1ms1h
    @user-vj8dv1ms1h 6 месяцев назад

    Broo was it a race!?

    • @HoxFramework
      @HoxFramework  6 месяцев назад +1

      I dont like wasting people's time
      Most of my viewers already know half the stuff - they are just here for the other half
      So i make sure to say what i have to without taking any breaks :)

  • @E3S7z
    @E3S7z 2 года назад

    whgy does thwe webisite doesnt work:(

    • @HoxFramework
      @HoxFramework  2 года назад

      Which website? The BEEF website or any HTTPS website to HTTP

  • @davidpereira8902
    @davidpereira8902 2 года назад

    can i do it with HTTPS ?

    • @HoxFramework
      @HoxFramework  2 года назад

      I talked about that in my other bettercap video (about SSL striping and more) you might find that fun
      short answer is: sometimes,not often

  • @_andrija.m
    @_andrija.m 7 месяцев назад

    Da li jje moguće koristiti BEEF u Windowsu

    • @HoxFramework
      @HoxFramework  7 месяцев назад

      Linux is recommended
      Everything is just easier

  • @K11d602
    @K11d602 9 месяцев назад

    The fact that this has 33 trojans 💀

    • @HoxFramework
      @HoxFramework  9 месяцев назад

      What does?
      BeefXSS? Bettercap?
      None of it does

    • @K11d602
      @K11d602 9 месяцев назад

      @@HoxFramework BeefXSS does, That's why you just install it on terminal programs.

    • @K11d602
      @K11d602 9 месяцев назад

      @@HoxFramework Cause with Kali installed on a virtual machine for example : VirtualBox it will just make a simulation of Kali Linux, so that means Beef it's simulated too, That's why it doesn't harm your PC.

    • @HoxFramework
      @HoxFramework  9 месяцев назад

      @@K11d602 I have, at least i think, never seen an executable instance of BEEF_XSS
      Obviously use hacking tools in your vm

    • @HoxFramework
      @HoxFramework  9 месяцев назад

      @@K11d602 I'm sure there is nothing wrong with Beef's source code, and it does affect your host pc since it affects my browser in the video
      Im not sure what you are getting at

  • @nathancoats6432
    @nathancoats6432 Год назад

    Good video but take it easy on the dope bro. LOL JK

    • @HoxFramework
      @HoxFramework  Год назад +1

      The only dope im using is sugar
      A lot of sugar

  • @georgebas1605
    @georgebas1605 Год назад

    do you need some beef or what

  • @chandansingh-rf4zf
    @chandansingh-rf4zf 2 года назад

    Sir when I download the app from the fake update the browser show me server not found how to I fix it. Plz help me.

    • @HoxFramework
      @HoxFramework  2 года назад

      You havent set up something right
      check your IPs and ports, the settings of your "app"
      also make sure the victim is in the same network as you are

  • @Qu33f0
    @Qu33f0 7 месяцев назад

    You're all over the place man, its a bit hard to follow.

    • @HoxFramework
      @HoxFramework  7 месяцев назад

      I usually suggest just slowing down the video a bit, it really makes things more clear for most people

  • @mayhem1994
    @mayhem1994 2 года назад

    bro you really have to slow down and go into in depth detail on how to set the apache server how to put the files in the the html folder it needs to be in depth

    • @HoxFramework
      @HoxFramework  2 года назад +1

      I explained all of that in the video, plus its purely basic stuff so i wouldnt spend too much of your time on it (all you have to do is run apache : service apache2 start ; then move anything you need to the /var/www/html : mv *something* /var/www/html/
      But you are right i did talk fast - i do this on purpose, i like my videos to be "no bullsh*t" and "no time wasted"
      I make sure i cover everything, yet talk fast enough not to have a 40min video that could be done in 20 minutes if i didnt talk slow
      I understand this might be an issue for pure beginners, but feel free to slow down the video - for other viewers (those who are a bit more advanced) they will appreciate faster talking since they know how to start apache and move a file to its folder
      I hope you understand - its for my videos to be all quality without messing around.
      I have few vids called "no rush computer stuff" and i do everything with regular speed there, however they arent my primary thing since a bunch of yt channels do that
      I've done a stream yesterday - on streams i take it slow and answer all questions as i go - so tune in if you want to visit a stream here and there :)
      Hope this helps

    • @mayhem1994
      @mayhem1994 2 года назад

      @@HoxFramework ohhhhhh ok I get it now I'm sorry my dude

    • @HoxFramework
      @HoxFramework  2 года назад

      @@mayhem1994 Hope i helped, if you have any more questions ask here or on discord

  • @call-me-potato.
    @call-me-potato. 10 месяцев назад

    it seems to be one of best tutorial , but unfortunately you are speaking too fast , i am not native english speaker.

    • @HoxFramework
      @HoxFramework  10 месяцев назад

      Sorry to hear that, feel free to speed-down my video (ex. 0.75x)
      I make sure my videos are very no-bullshit and no-timewaste oriented so that beginners to pros can watch it without feeling sorry about their time

  • @professorvolt8673
    @professorvolt8673 Год назад +1

    DUDE! don`t record while HIGH AS A KITE ON METH! :D :D

    • @HoxFramework
      @HoxFramework  Год назад

      I've never done any drugs.
      I talk fast not to waste time of my viewers.

    • @kestonsmith1354
      @kestonsmith1354 Год назад +1

      @@HoxFramework He's right, you talk little too fast and everything is just flashing across the screen, the aim is not to go fast, just slow dow,n and going slower doesn't waste your viewers time, Freecodecamp videos are hours

    • @HoxFramework
      @HoxFramework  Год назад +1

      ​@@kestonsmith1354 I know and i understand you but im the type of person to easily get bored so i make my videos to be interesting to me all the time. You know how like a Mr.Beast video has a lot of content shoved in your face - i know its not a great example but its a point on keeping your viewers interested over concentrated lets say - Ofcourse i know this isnt ideal, since learning takes more caution but thats where the problem with the range my viewers cover comes in place: I have viewers that are beginners and viewers that are experts so i dont wanna waste expert's time and yet i wanna explain every single small part and hint to beginners.
      Its difficult to find the middle ground but lately i have slightly decreased my speed - you can notice that in my latest video (and the new one upcomming)
      These are my thoughts - let me know what you think. Im always open to hear new opinions and points where i can improve myself.
      That being said - keep in mind that I do wanna stay different than thousands of other channels :)
      Again - thanks for commenting! Have a nice day bro

    • @kestonsmith1354
      @kestonsmith1354 Год назад

      @@HoxFramework The thing is that there are beginners than they are experts in the field. That's why alot of videos from creators in this space take a more beginner friendly approach but I do understand that you can get bored, so what I would suggest is make a series or chop up it up into videos.
      If someone is following along well in part 1 , they're more likely to watch part 2 and part 3. Whereas if the video is more than 20 mins long and the person have to keep rewinding to understand what's being said then or the steps carried out, it's unlikely they will finish the video.
      That's just my suggestion .

    • @HoxFramework
      @HoxFramework  Год назад +1

      ​@@kestonsmith1354 Hm you mean like divide videos into specific types? Like some for advanced some for not advanced?
      But thats another problem most of my videos would be like 30 minutes or more since i really wanna explain everything and make sure i dont miss out (i dont like tutorials where people just show when it works and say nothing else, i wanna also show what happens when it doesnt work & similar)
      But i completely understand your point and i do take it as a valid one. Let me know what you think of my new video - is it too fast or is the talking temp okay?
      I appreciate the suggestions man! Thanks!

  • @QueenChineye-di8ie
    @QueenChineye-di8ie 18 дней назад

    Too fast, not easy to follow up

    • @HoxFramework
      @HoxFramework  17 дней назад

      Sorry to hear that bro,
      but you can slow down the vid with the playback speed button tho
      I usually talk faster :/

  • @mrincognito6936
    @mrincognito6936 2 года назад

    Can the target be outside the network?

    • @HoxFramework
      @HoxFramework  2 года назад

      For Beef yes, bettercap not really - its meant for MITM in this case

  • @dayshag5257
    @dayshag5257 2 года назад

    the bettercap won't work

    • @HoxFramework
      @HoxFramework  2 года назад

      what error are you getting

    • @dayshag5257
      @dayshag5257 2 года назад

      @Hox Framework bettercap can't find the target and the part where you get hooked if you visit a website

    • @HoxFramework
      @HoxFramework  2 года назад

      @@dayshag5257 Does your arp spoof work?

    • @dayshag5257
      @dayshag5257 2 года назад

      @@HoxFramework no

    • @HoxFramework
      @HoxFramework  2 года назад

      @@dayshag5257 There's your answer
      If your arpspoof doesnt work it means you are getting blocked by your router - i've mentioned this in the video. Before MITM-ign first make sure your arp spoof works.

  • @tag6516
    @tag6516 2 года назад

    Please explain little bit slowly ...

    • @HoxFramework
      @HoxFramework  2 года назад +1

      Sorry about that, explained it quickly on purpose - so people who already know dont have to spend too much time listening to what they know, and yet tried to cover everything so new learners can grasp it all quickly. I could do it slower if you want to but you can also slow down the vid a bit and it should do the trick, anyways thanks for watching man! Let me know if you have any questions or anything

  • @_kornel7941
    @_kornel7941 2 года назад

    Hey Hox, i just wanna ask what to do if i type in bettercap and it says permission denied. I tryed it by doing sudo bettercap but my http.proxy.sslstring, and the injectjs doesnt do anything.

    • @HoxFramework
      @HoxFramework  2 года назад

      I dont think scripts have anything to do with permissions, if you ran it with sudo everything should run well
      as for why your scripts dont work - make sure you check if anything else works - if the browser blocks arp spoofing you most likely wont be able to run these scripts

  • @tiranicusw1433
    @tiranicusw1433 14 дней назад

    U do not have any idea to tech anything ....