Mastering Modern Web Penetration Testing

XSS exploitation – The BeEF

The BeEF (Browser Exploitation Framework) is an XSS exploitation tool that promises to take over a victim's browser session as a part of the exploitation. BeEF contains different types of modules and payloads, which will be covered in this section.

BeEF comes preinstalled in Kali Linux 2.0 and we'll use the same. Otherwise you can download BeEF from the project's website at https://beefproject.com/.

Setting Up BeEF

Starting up BeEF is pretty straightforward; it can be launched from Kali's Application menu, under Exploitation Tools as shown in following image:

Once BeEF is launched; the BeEF control panel interface becomes ...