[Instructor] So now that we have our browser or taget hooked 2 2
we can go on to commands and start 3 3
executing commands on that target. 4 4
You can use search to filter, looking for certain command 5 5
if you know what your looking for. 6 6
Or you can use the categories and look for commands 7 7
suitable to what you want to do on the targeted computer. 8 8
Some of this information gathering commands, 9 9
some of them are social engineering, 10 10
some of them will even give you full control 11 11
over the target computer. 12 12
There's a lot of commands. So once we able to go 13 13
over all of them. But I'll be showing you some of the 14 14
most important commands and examples of simple once as well. 15 15
So you know how to experiment and run the other commands. 16 16
So were starting if you go into browser you'll see commands 17 17
related to stuff that you can do inside the browser. 18 18
So you can see things that will allow you to for example 19 19
get a screen shot and you'll be able to try and gain 20 20
and turn on the web cam and see if it works. 21 21
And basically open the webcam on the target. 22 22
You can gather information, uhm if you go here 23 23
on the exploits, you'll see a number of exploits 24 24
that you can run, again depending on what's running 25 25
on the target computer, you can run them. 26 26
All you have to do is just click on the module 27 27
that you want to run and click on the execute. 28 28
Sometimes some modules need to set some options to be set up 29 29
and we'll have examples of that as well. 30 30
In the social engineering again there are some 31 31
really cool stuff that you can do and you can 32 32
show fake updates, fake notification bars 33 33
and stuff like that. 34 34
So lets have an example of a very simple command. 35 35
So again were gonna do just an alert to show an alert box 36 36
(clicking). 37 37
So I'm just using the search to filter 38 38
and you can see here this will just create an alert dialog 39 39
and its going to say "beef alert dialog". 40 40
You can modify this and type anything you want. 41 41
For exampple, I'm gonna type in "test". 42 42
And then when you hit "execute". 43 43
Go on to target, and you'll see that the target 44 44
got a message saying "test". 45 45
So this has been injected into the target browser. 46 46
And other cool thing that you can do 47 47
is the roll java script. 48 48
And this will allow you 49 49
to execute any java script you want. 50 50
So again you can look for google for a useful 51 51
java script code for example a key-logger 52 52
or whatever you want to do. Or you can write your own 53 53
if you know java script. And basically whatever 54 54
you write here will be executed on the target. 55 55
Again were only seeing an alert, 56 56
and this will only going say "beef roll java script" 57 57
I'm gonna execute, 58 58
and here we go again 59 59
we got a dialog saying "beef roll java script". 60 60
Lets see if we can get a screen shot of a target computer. 61 61
And were going to use a plug-in called "spy". 62 62
Spyder eye I think, yeah. Spyder eye. 63 63
So again, click on in, hit "execute" 64 64
then were gonna click on the command here. 65 65
Looks like this time didn't work properly. 66 66
Lets just do it again. 67 67
And here we go, as you can see 68 68
we got a screen shot of what the target person is looking up 69 69
another really good plug-in is a plug-in 70 70
its a redirect plug-in. 71 71
And it will basically allow you to 72 72
redirect the browser to any webpage you want. 73 73
This could be very useful because you can use it 74 74
to redirect the target person and tell them 75 75
that they need to download that update 76 76
and instead of giving them an update, give them a backdoor. 77 77
You can redirect them to a fake login page for example. 78 78
For Facebook, you can really anything you want with this. 79 79
So, you can set the website that you want the target 80 80
to be redirected to and were gonna redirect them to 81 81
"beef project" in this example. and once you hit execute. 82 82
As you can see here, they're redirected to "beef project". 83 83
These are some of the basic modules that you can use. 84 84
Again you can experiment with these. 85 85
Go over them and see what would be useful 86 86
in your particular situation.