BeEF

v0.5.4BeEF Project

Demonstrates the real impact of an XSS: a hooked browser appears in the console and the tester can run command modules against it — fingerprinting, social-engineering prompts, network reach from inside the victim's session. The range shows the hook lifecycle and module catalog against a simulated victim browser.

Category: Exploitation frameworks
Package: beef-xss
Runs on: Linux
Commands: beef-xss, beef
Console: http://beef.range.local:3000/ui/panel

The hooked browser is an authored fixture. No JavaScript hook is served to, or executed in, a real browser.

Install it

The scripts below install the real BeEF Project package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)

install-beef.sh

Windows installer (PowerShell)

Install-beef.ps1

No native Windows build. Use a Linux host in the range, or run it under WSL.

On a range machine

Add it to your kit and every machine you launch comes with it.

On Linux

Debian, Ubuntu, Kali (apt)

Refresh the package lists
```
sudo apt update
```
Install BeEF
```
sudo apt install -y beef-xss
```

RHEL, Fedora (dnf)

Install BeEF
```
sudo dnf install -y beef-xss
```
Package names drift between distributions; search first if this one misses.

Arch (pacman)

Install BeEF
```
sudo pacman -S --noconfirm beef-xss
```

Alpine (apk)

Install BeEF
```
sudo apk add beef-xss
```
Package names drift between distributions; search first if this one misses.

Check it worked

Confirm it landed on PATH
```
which beef-xss
```
Check the version
```
beef-xss --version
```
The range reports 0.5.4.

Remove it

Take it off again
```
sudo apt remove --purge beef-xss
```

On Windows

No native Windows build. Use a Linux host in the range, or run it under WSL.

Windows Subsystem for Linux

Install a Linux userland on the Windows host
```
wsl --install -d Ubuntu
```
The upstream project has no native Windows build; WSL is the usual way round it.
Install BeEF inside it
```
wsl sudo apt install -y beef-xss
```

Inside the range

Tick it on the launch screen
Under BeEF's category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.
Or install it from a range terminal
```
sudo apt install -y beef-xss
```
The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.
Everything here is simulated
No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use BeEF

Pentest: Authorized Phishing SimulationClone the customer's SSO portal, send a hundred lures against a pre-agreed roster, watch clicks and credentials land in the C2, and file a template-plus-training finding without ever holding a real password.