Persistence

Introduction

BeEF has four modules that have been developed to help maintain persistence on hooked browsers.

Table of Contents

• Old School Module
• Dirty Module
• Stealth Module
• Clean Module

Old School Module

The Old School module will create a pop-up window underneath the victim's browser. This window will open an empty BeEF page. An old school technique but it still works!

Dirty Module

The Dirty module will ask the user to confirm that they want to close this tab again and again and again. Dirty!

Stealth Module

The Stealth module will rewrite all the links on the web-page causing them to load the target URL in a 100% foreground iFrame. This means that the victim sees the page they were expecting to be redirected to, but the URL still does not change!

Clean Module

The Clean module launches a "man-in-the-browser" hack. It listens for and handles any click on a link.

For links within same domain, Clean will make an AJAX request and load the new page instead of the old one and then add the page into the browser's history. There will be no visible difference to the victim. The page will load in the typical fashion but the browser is still hooked.

The Same Origin Policy prevents this behaviour on other domains, so in the event that the victim navigates to a domain that is not within the same domain, Clean will open the requested web-page in a new tab.

---

Previous | Next