View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0002317 | Kali Linux | Kali Package Improvement | public | 2015-06-06 18:21 | 2015-07-28 21:48 |
Reporter | g0tmi1k | Assigned To | rhertzog | ||
Priority | normal | Severity | minor | Reproducibility | N/A |
Status | resolved | Resolution | fixed | ||
Product Version | 2.0 | ||||
Fixed in Version | 2.0 | ||||
Summary | 0002317: BeEF XSS - start command | ||||
Description | The current
1. SleepI suggest that the delay is increased. 2. ServiceRather than just 3. Hook informationIf you were to start beef like the follow:
You see information regarding the 'hook'. I suggest something like:
4. [BUG] Not using port informationIf you were to alter which port beef uses in '/usr/share/beef-xss/config.yaml' e.g (port: "3001"), the script is hardcoded to use 3000. grep -e ' port:.*"' /usr/share/beef-xss/config.yaml | awk -F '"' '{print $2}'
For the record, I know 'awk' is slower than other commands and theres better bash fu | ||||
Additional Information | root@kali:~# dpkg -l | grep beef | ||||
Attached Files | beef-xss (589 bytes)
#!/bin/bash if [[ $EUID -ne 0 ]]; then echo "[*] This script must be run as root" 1>&2 exit 1 fi port=$(grep -e ' port:.*"' /usr/share/beef-xss/config.yaml | awk -F '"' '{print $2}') echo '[*] Please wait as BeEF service is started.' service beef-xss restart sleep 3 echo '[*] Hook: <script src="http://<IP>:<PORT>/hook.js"></script>' echo '[*] Example: <script src="http://127.0.0.1:'${port}'/hook.js"></script>' echo '[*] Default credentials: beef / beef' echo '[*] You might need to refresh your browser once it opens.' sleep 5 xdg-open http://127.0.0.1:${port}/ui/panel | ||||
Fixed points 1, 3, 4 in beef-xss_0.4.6.1-0kali2.dsc. For point 2, I don't see why you would want to stop beef-xss in the script. With systemd in sana, "service beef-xss start" is a no-op if it's already started. And for the last comments about login credentials, I don't think that we should diverge from the default user/password. I agree it should be adressed through documentation. |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2015-06-06 18:21 | g0tmi1k | New Issue | |
2015-07-27 10:16 | g0tmi1k | File Added: beef-xss | |
2015-07-27 10:16 | g0tmi1k | Product Version | => 2.0 |
2015-07-27 14:41 | rhertzog | Assigned To | => rhertzog |
2015-07-27 14:41 | rhertzog | Status | new => assigned |
2015-07-28 21:48 | rhertzog | Note Added: 0003625 | |
2015-07-28 21:48 | rhertzog | Status | assigned => resolved |
2015-07-28 21:48 | rhertzog | Fixed in Version | => 2.0 |
2015-07-28 21:48 | rhertzog | Resolution | open => fixed |