1. Hooking Victums within the network:
It will create the web page having capabilities to hook browser to beef framework which could be used for targets within the networks (targets that are connected to same network as of the attacker). It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
2. Hooking Victums outside the network using Port Forwording:
It will create web page having capabilities to hook browser to beef framework which could be used within the network and also against the target that are outside the network (not connected to same network). But you need to configure your router to forword ports in order to make it work. It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
3. Hooked Victums outside the network using Localhost.run:
It will create web page having capabilities to hook browser to beef framework which could be used within and outside the network. Localhost.run is free service to expose your Localhost to internet using ssh tunneling. Tool will setup ssh key and then using it will create public urls of both the webserver and beef panel using Localhost.run service. It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
4. Hooking Victums outside the network using ngrok:
It will create web page having capabilities to hook browser to beef framework which could be used within and outside the network. Ngrok is one of the famous service to expose your Localhost to internet. Free ngrok token is not recommended for web page as it warns the target before going to page which will reduce the success of attack. For ngrok, you will need first to signup to ngrok website and will need ngrok auth-token to provide to this tool in order for this attack to work.
5. Hooking Victums outside the network using serveo:
It will create web page having capabilities to hook browser to beef framework which could be used within and outside the network. Serveo is free service to expose your Localhost to internet using ssh tunneling. It is similar to Localhost.run. Tool will setup ssh key and then using it will create public url using serveo service. It will provide url that can be sent to target and when target visit it it will be hook to over beef framework and beef panel url will also be provided by tool to access and perform attacks on hooked browser.
6. Web Page Options:
Phishing Page creation menu is used to create phishing page. It includes 3 different method to setup the phishing page.
- Phishing Page of Login Page of Website using URL: It requires the url of login page of target website to create the phishing page exactly similar to that login page. It will also ask for name, it could be random and is just to differentiate websites with different name in apache2 folder.
Note: You must be connected to internet to create Phishing page with url. Phishing page of some websites like FaceBook or Google could not be created using url. So, try using already created phishing page of famous websites.
- Phishing Page of famous websites: It include login pages of 43 famous websites. By selecting one of these,it will create phishing page of login page of website.
- Want to place your own phishing page files: If you want to place phishing page created by you, then use this option. First place your phishing page files in a folder and place this folder in "/var/www/html" folder. It will list all folders present in "/var/www/hrml". Select your folder and it will create phishing page using it.