BeEF

What it does

BeEF hooks web browsers via XSS or an injected hook script and runs client-side modules against them. It's used to demonstrate the real impact of cross-site scripting and browser-based attacks.

Common use cases

• •Demonstrate XSS impact by hooking a browser and executing client-side post-exploitation modules.
• •Steal session cookies, credentials, and page content from a hooked browser in a live test.
• •Phish credentials from a victim through a hooked browser's rendered login overlay.

Key features

• •Over 300 browser-exploitation modules including keylogging, clipboard theft, and network scan.
• •Hooks persist across page navigations as long as the tab remains open.
• •Provides a command-and-control panel for managing all hooked browsers in real time.
• •Supports tunneling through the hooked browser to reach internal networks.

Source