BeEF XSS Only Works Temporarily?

When I use BeEF, using the hook and running command works... At first. Whenever a hooked user exits the page or browser, it seems as though they stop working. Why does it do this and how can I fix it?

2 Responses

BeEF runs in a JS environment, which relies on the users browser being on the page your hook.js is running from. Once they leave that page, it's code is no longer executed, and so BeEF no longer has any control. However there is a Man in the Browser exploit (under the persistence tab I think) which should allow you to keep control despite the user leaving your page. The technical details of how this exploit works is beyond me, but it is there and presumably will do what you want to do.

Best of luck :)

Thanks! I'll have to try it!

Share Your Thoughts