i HACKED my wife’s web browser (it’s SCARY easy!!)
About this video
He demonstrates BeEF, the Browser Exploitation Framework, by hooking a browser that opens a malicious link, warning that doing this without explicit permission is illegal. He sets up BeEF quickly using a Linode marketplace server, noting his example plan and that BeEF also comes pre-installed on Kali, then logs in via the URL and credentials stored in a beef.info file on the server. Using BeEF’s pre-built demo page he hooks his own test browser and shows the system details BeEF collects, runs a simple alert dialog, and demonstrates social-engineering modules including a fake Google sign-in and a fake LastPass prompt that he shows capturing entered credentials and keystrokes in the command history. He also explores network commands for identifying LAN subnets and scanning hosts, a redirect that keeps the victim in an iframe so the URL does not change, and repeats the hook on an iPhone browser via a shortened URL, urging viewers not to open unrecognised links even when they have SSL.
Key takeaways
- BeEF hooks a browser when a victim opens a page containing its malicious JavaScript
- A cloud marketplace install avoids local port-forwarding setup; Kali includes BeEF pre-installed
- Once hooked, BeEF reports browser and system details and can run commands
- He demonstrates fake Google and LastPass prompts capturing entered credentials
- An iframe redirect can change what the victim sees without changing the visible URL
Episode details: published February 15, 2022 · 14:36 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.
← Previous: 2 cool (web) things to do in Linux // Linux for Hackers // EP 8 · Next: if if if if if….elif →
All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube
