So now that we have our browser or target hooked, we can go on the commands and start executing commands
on that target.
You can use the search to filter looking for a certain command if you know what you're looking for,
or you can use the categories and look for commands suitable to what you want to do on the target's
computer.
Some of these commands are information gathering commands.
Some of them are a social engineering.
Some of them will even give you full control over the target computer.
There is a lot of commands, so I won't be able to go over all of them.
But I'll be showing you some of the most important commands and examples of simple ones as well.
So you know how to experiment and run the other commands.
So we're starting if you go to the browser, you'll see commands related to stuff that you can do inside
the browser, so you can see things that will allow you to, for example, get a screenshot.
You'll be able to try and gain and turn on the webcam and see if it works and basically opened the webcam
on the target.
You can gather information.
If you go here on the exploits, you'll see a number of exploits that you can run again, depending
on what's running on the target computer.
You can run them.
All they have to do is just click on the module that you want to run and click on execute.
Sometimes the modules need to send some options to be set up and we'll have examples of that as well.
And the social engineering, again, there is some really cool stuff that you can do.
You can show fake updates, fake notification bars and stuff like that.
So let's have an example of a very simple command.
So, again, we're going to do just an alert to show an alert box.
So I'm just using the search to filter and you can see here, this will just create an alert dialogue
and it's going to say beef alert dialog.
You can modify this and type in anything you want.
For example, I'm going to type in test.
And then when you hit execute.
Go on the target and you'll see that the target got a message saying test, so this has been injected
into the target browser.
Another cool thing that you can do is draw JavaScript.
And this will allow you to execute any JavaScript you want.
So, again, you can look for Google for a useful JavaScript code, for example, a key logger or whatever
you want to do, or you can write your own if you know JavaScript and basically whatever you write here
will be executed on the target.
Again, we're only saying an alert and this is going to say before JavaScript, I'm going to execute.
And here we go again, we got a dialogue saying we've tried JavaScript.
Let's see if we can get a screenshot of the Target computer and we're going to use a plugin called Spy
Spider, I think.
Yeah, Spider I.
So, again, click on it, hit execute.
Give it a second, then we're going to click on the command here.
Um, looks like this time didn't work properly.
Let's just do it again.
And here we go, as you can see, we got a screenshot of what the target person is looking at.
Another really good plug in is a plug in, it's redirect plug in.
And it will basically allow you to redirect the browser to any Web page you want.
This could be very useful because you can use it to redirect the target person and tell them that they're
going to they need to download an update.
And instead of giving them an update, give them a backdoor.
You can redirect them to a fake login page, for example, for Facebook.
You can really do anything you want with this.
So you can set the website that you want the target to be redirected to.
And we're going to redirect them to be a project in this example.
And once you hit, execute.
As you can see here, the redirected to beef project.
These are some of the basic modules that are that you can use.
Again, you can experiment with these, go over them and see what would be useful in your particular
situation.