-
This talk was presented in Las Vegas 2009 at DefCon 17 by Joshua "Jabra" Abraham and Robert "RSnake" Hansen. The slides and the demos can be found at : http://www.spl0it.org/files/talks/defcon09/
-
This is a module from the Browser Exploitation Framework (BeEF) to perform an iframe redirection to Metasploit Browser Autopwn or a Browser Exploit. However, in this video, we used netcat (nc) instead of Metasploit. We configured netcat to listen and verify that the request was made to netcat. In exploitation, Metasploit would launch the exploit(s) against the client once the first request is made. This was demonstrated during "Unmasking You!" at…
-
This is a module from the Browser Exploitation Framework (BeEF) to load a malicious Java Applet on the client. If the client runs the applet a connection from the client's system to the attacker's system is made using the Metasploit Exploitation Framework. This was demonstrated during "Unmasking You!" at BlackHat 09 and DEFCON 17 by Joshua "Jabra" Abraham and Robert "RSnake" Hansen.
-
This is a module from the Browser Exploitation Framework (BeEF) to identity all of the URL that the client has visited. This technique uses the CSS history to identify valid results. This was demonstrated during "Unmasking You!" at BlackHat 09 and DEFCON 17 by Joshua "Jabra" Abraham and Robert "RSnake" Hansen.
-
This is a module from the Browser Exploitation Framework (BeEF) to detect the virtualization technology being used on by the client. This technique uses the MAC address with a regular expression to identify if the client is running on VMware, QEMU, VirtualBox or Amazon EC2. This was demonstrated during "Unmasking You!" at BlackHat 09 and DEFCON 17 by Joshua "Jabra" Abraham and Robert "RSnake" Hansen.
Channels are a simple, beautiful way to showcase and watch videos. Browse more Channels. 