So now that we have our browser or target hooked we can go on the commands and start executing commands
on that target.
You can use the search to filter it looking for a certain command if you know what you're looking for
or you can use the categories and look for commands suitable to what you want to do on the target computer.
Some of these commands are information gathering commands.
Some of them are social engineering.
Some of them will even give you full control over the target computer.
There is a lot of commands.
So I want to be able to go over all of them but I'll be showing you some of the most important commands
and examples of simple ones as well.
So you know how to experiment and run the other commands so where it doesn't.
If you go to the browser you'll see commands related to stuff that you can do inside the browser so
you can see things that will allow you to for example get a screenshot and you'll be able to try and
gain and turn on the web cam and see if it works.
And basically open the webcam on the target you can gather information.
If you go here on the exploits you'll see a number of exploits that you can run again depending on what's
running on the contact with computer.
You can run them all you have to do is just click on the module that you want to run and click on execute.
Sometimes the modules need to set some options to be set up and we'll have examples of that as well.
And the social engineering again there are some really cool stuff that you can do and you can show fake
updates fake notification bars and stuff like that.
So tell me an example of a very simple command.
So again we're going to do just an alert to show an alert box so some just using the search to filter
and you can see here this will just create an alert dialog and it's going to say Be alert dialog.
You can modify this and type in anything you want.
For example I'm going to type in test and then when you execute go into Target and you'll see that the
target got a message saying test.
So this has been injected into the target browser.
Another cool thing that you can do is the wrong javascript
and this will allow you to execute any javascript you want.
So again you can look for Google for useful javascript code for example a key logger or whatever you
want to do or you can write your own if you know javascript and basically whatever you write here will
be executed on the target.
Again we're only saying an alert and this is going to say beef raw javascript and can execute.
And here we go again we get a dialog saying we've tried javascript.
Let's see if we can get a screenshot of the target computer and we're going to use plug in called Spy.
Spider I think yes by there I so again click on it here like Suku give it a second then we're going
to click on the command here.
It looks like this time didn't work properly let's just do it again.
And here we go.
As you can see we've got a screen shot of what the target person is looking at.
I know the really good plug in is a plug in.
It's a redirect plug in and it will basically allow you to redirect the browser to any web page you
want.
This could be very useful because you can use it to redirect the target person and tell them that they're
going to need to download that update and instead of giving them an update give them back or you can
redirect them to a fake logon page for example for Facebook.
You can really do anything you want with this so you can set the website that you want the target to
be redirected to.
And we're going to redirect them to project in this example and we'll see you.
Execute
as you can see here they are redirected to beef project.
These are some of the basic modules that are that you can use.
Again you can experiment with these.
Go over them and see what would be useful in your particular situation.