Files
beef/modules/exploits/beef_admin_panel_xss/config.yaml
2026-01-21 15:32:44 +10:00

16 lines
813 B
YAML

#
# Copyright (c) 2006-2026 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - https://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
beef:
module:
beef_admin_panel_xss:
enable: true
category: "Exploits"
name: "BeEF Admin Panel XSS"
description: "This module exploits a Stored XSS vulnerability in the BeEF Admin Panel's Hooked Browsers tooltip. It registers a fake hooked browser with a malicious OS name containing JavaScript payload. When the BeEF administrator hovers over the fake browser entry, the XSS payload executes.<br/><br/>This can be used to test if a target BeEF instance is running a vulnerable version."
authors: ["author"]
target:
working: ["ALL"]