BeEF
Browser Exploitation Framework.
KaliParrothigh
pkg: beef-xss
BeEF hooks web browsers (typically via XSS) and lets you run client-side modules against the hooked browser.
Syntax
beef-xss
Example
sudo beef-xss # then inject the hook.js via XSS
Starts BeEF; once a victim loads the hook, the browser appears in the control panel.
Advantages
- Unique client-side attack surface
- Many ready browser modules
- Demonstrates XSS impact vividly
Disadvantages
- Requires a working XSS/hook delivery
- Loud and easily detected
- Strong authorization required
Tags
#xss#browser#client-side
Official docs: BeEF ↗
Related commands
Frequently asked questions
What is BeEF used for?
BeEF hooks web browsers (typically via XSS) and lets you run client-side modules against the hooked browser.
What is an example BeEF command?
A common example is: sudo beef-xss # then inject the hook.js via XSS — Starts BeEF; once a victim loads the hook, the browser appears in the control panel.
Is BeEF part of Kali Linux?
Yes. BeEF ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install beef-xss.
What category of security tool is BeEF?
BeEF is a Exploitation tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.