SpiderLabs / beef_injection_framework

Inject beef hooks into HTTP traffic and track hooked systems from cmdline
GNU General Public License v3.0
120 stars 42 forks source link

Poisoning but no connected zombie in beef admin panel #4

Open manprototype opened 11 years ago

manprototype commented 11 years ago

Shank.rb working...poisoning but i can't see any zombie/client in beef admin panel..just in console output like this: Hooked Browser Summary [] request: overrode Accept-Encoding... request: overrode Accept-Encoding... poison request: overrode Accept-Encoding... request: overrode Accept-Encoding... request: overrode Accept-Encoding.... poison poison poison poison poison Hooked Browser Summary [] poison

What's wrong?

seag33k commented 11 years ago

I am having the same issue. I am running shank.rb from BT5R3. Any suggestions would be great!

adlabs commented 11 years ago

I have the same...it seems like shank.rb dont work with backtrack5 and nobody..even authors..don't wanna help with this..i was send email to them but didn't respond...shame because the idea is very interesting

nyge commented 11 years ago

Same thing here. I unfortunately don't have total control over my router. So I cannot "Disable port forwarding." I do know that shank requires no port forwarding within the subnet. So this ~would be my next try. USAGE

1.Launch BeEF

2.Launch shank.rb 

where "network" is a valid CIDR address
NOTE: Ensure that ip_forwarding is DISABLED

3.Launch autorun.rb

I hope this helps. Lemme know. Moving soon and will have control over the port forwarding. Even an auto configuration from a torrent client or video game installation could cause problems.

ghost commented 10 years ago

Has anyone successfully gotten this working? I am having a similar problem. I have tried running this on BT5R3 (which is kinda hard to setup now that all the repos are down) and on Kali. I can get everything working and it all looks great but no hook in the UI. The script says "BeEF Thread Started" and then when I browse to a website it says "Injected Into Response" (sometimes also with updated length). But nothing hooked in the UI and nothing showing up in "Hooked Browser Summary". BeEF hooks just fine when I browse to the BeEF test page. I have tried many different websites. Updated the shank.rb beef ip to the eth0 IP address (i have also tried 127.0.0.1). I run the script like "ruby shank.rb 10.0.0.0/24" and I have tried "ruby shank.rb 10.0.0.0". What am I missing here?

binarymist commented 9 years ago

I think it's just broken? This would be a great tool if it worked. I'm sure it must have worked at some stage. How can I help fix it?

I'm a programmer, just not a ruby programmer. I was hoping to use this as the finale for a conference demo that I'm doing. BeEF and beef_injection_framework were running on a VM.

Any help please?

sussurro commented 9 years ago

Just checking, but have you updated the IP in shank,rb to point to the BeEF Server ? Can the victim see that IP address from their vantage point ?