BeefHacks

An open source Beef framework Attacks Toolkit could be used to practice different types attacks that attacker could performs using beef framework and provide awareness. This tool also use beef-master tool from github and this folder is included in src folder of BeefHacks tool. This tool do nat make any changes in this tool and just use it. It is created for educational purpose only. Any harm using this tool will be on that person who used this tool for unethical purposes.

• Language: Python 3

• Operating System type : Linux

• Tested On: Kali Linux 2024 , Respberry Pi 4

Requirements

The Beef-Hacks folder contains "requirements.txt" file. Its contains all the required python libraries for this tool. Install them manualy by using:

sudo pip3 install [library]

OR use the requirements.txt file and install as:

sudo pip3 install -r requirements.txt

Features

• Hooking Victums within the network: It will create the web page having capabilities to hook browser to beef framework which could be used for targets within the networks (targets that are connected to same network as of the attacker). It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
• Hooking Victums outside the network using Port Forwording: It will create web page having capabilities to hook browser to beef framework which could be used within the network and also against the target that are outside the network (not connected to same network). But you need to configure your router to forword ports in order to make it work. It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
• Hooked Victums outside the network using Localhost.run: It will create web page having capabilities to hook browser to beef framework which could be used within and outside the network. Localhost.run is free service to expose your Localhost to internet using ssh tunneling. Tool will setup ssh key and then using it will create public urls of both the webserver and beef panel using Localhost.run service. It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
• Hooking Victums outside the network using ngrok: It will create web page having capabilities to hook browser to beef framework which could be used within and outside the network. Ngrok is one of the famous service to expose your Localhost to internet. Free ngrok token is not recommended for web page as it warns the target before going to page which will reduce the success of attack. For ngrok, you will need first to signup to ngrok website and will need ngrok auth-token to provide to this tool in order for this attack to work.
• Hooking Victums outside the network using serveo: It will create web page having capabilities to hook browser to beef framework which could be used within and outside the network. Serveo is free service to expose your Localhost to internet using ssh tunneling. It is similar to Localhost.run. Tool will setup ssh key and then using it will create public url using serveo service. It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
• Web Page Options: Phishing Page creation menu is used to create phishing page. It includes 3 different method to setup the phishing page.

1. Phishing Page of Login Page of Website using URL: It requires the url of login page of target website to create the phishing page exactly similar to that login page. It will also ask for name, it could be random and is just to differentiate websites with different name in apache2 folder.

Note: You must be connected to internet to create Phishing page with url. Phishing page of some websites like FaceBook or Google could not be created using url. So, try using already created phishing page of famous websites.

2. Phishing Page of famous websites: It include login pages of 43 famous websites. By selecting one of these,it will create phishing page of login page of website.

3. Want to place your own phishing page files: If you want to place phishing page created by you, then use this option. First place your phishing page files in a folder and place this folder in "/var/www/html" folder. It will list all folders present in "/var/www/hrml". Select your folder and it will create phishing page using it.

Usage/Installation

After installing the requirements using "requirements.txt". Run the program using following command:

sudo python3 main.py

First program will try to install the required linux tools. It will try to install these using "apt" manager. It your linux don't have "apt" manager then try to install below listed tools manually as without these tools it will not work.

• Apache2
• Ngrok (for using ngrok service)

Also, Tool uses beef framework for this tool will try to install beef dependencies. If some error occur in tool during installing beef dependencies, then install these manually by visiting beef framework folder that will be in src folder and type './install' to run the 'install' file of beef.