In today’s video, you will learn how to use BeEF Framework outside your network and hook browsers, using cloud servers we will be using a hosting service called digital ocean to host our BeEF server, then I will be doing a live attack on myself to demonstrate a real attack scenario.

Timestamps click them to jump into the topic:
1:30​ — Setting up our Cloud environment
5:30​ — Starting of the installation process
12:00​ — Starting BeEF and our Apache service
14:27​ — Editing our Apache server index to our hook
16:00​ — How to use BeEF and install fake updates
19:50​ — The ending of the video

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser.

Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system and examines exploitability within the context of the one open door: the web browser. BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.

Resources:

• Digital Ocean 100$ Free Credit
• BeEF installation guide on the cloud