OK, so in this video, I will show you how to use a V framework with your captive portal web page to
gain control over the target web browser.
So first off, make sure we have beef install on your system, and in my case, I have beef installed
from GitHub.
So here in the build directly, I will dive dot slash beef to start the browser exploitation framework.
Now you can see the hook and the UI link.
So in order to attack a browser, you need to include the JavaScript hook URL in a web page, and the
UI link is the web interface for the tool.
So I will start the web interface by open the link and here the user name is beef and password beef,
and on the left is the Hook Browsers panel, and I do not have any target hooked for the moment.
So let's see how to hook up browser and to do that.
I'll go back to the terminal and open a new tab and change directory to slash forced flash WW slash
HDMI.
This is the location for the Apache Web server where I have the captive portal files.
So I would list all the files using s and no, I will open index dot html using Nannerl and the name
of the file.
And in the third section you will need to add the Hulk URL.
So all TypeScript is RC equal and go to beef and copy the whole QR code and pasted here.
And closed the script and saved the foil.
OK, so let's go to the victim's machine and connect the access point, and not the victim will be automatically
directed to the login page, which contains the malicious JavaScript hook you are in.
And to understand better, I will use right click and select View Page Source, and in the hidden section
you can see the JavaScript hook, which is executed when the victim loads the web page or key knowledge
swashbuckling machine and go to Beef Control Panel.
And here to conceal who browser with the IP address.
So at this point, you can exploit the victim browser.
And to give you an example, I will go to comment and search for alert and select Create Alert, and
I will you.
This is a fake network and click the Execute button.
OK, now let's go to the victim machine and here can see the alert message has appeared.
So that's it for now.
Thanks for watching, and I will see you next time.