+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: beEF + bettercap + reverse proxy (/showthread.php?tid=6150307)
beEF + bettercap + reverse proxy - MoPhaux - Apr 21, 2021
This is my first post here, dont tear me up. :P
This is the scenario, hypothetically. I have a server hosting some web applications and I am using an apache server as a reverse proxy to point to the applications. I want to use beEF to hook everything flowing through the reverse proxy. Is this possible? Either with beEF as a standalone or with beEF + bettercap? In my head it seems like a simple task but I cant seem to figure it out. Any help or thoughts would be greatly appreciated.
RE: beEF + bettercap + reverse proxy - нα¢кєя - Apr 22, 2021
Beef would fail if its an HTTPS website with HSTS enabled headers as the bettercap would fail. Bettercap works in HTTP only scenarios , it may show the https traffic but capturing the credentials or injecting JS would be difficult unless you are able to perform a downgrade attack. I may be wrong too.
RE: beEF + bettercap + reverse proxy - MoPhaux - Apr 22, 2021
(Apr 22, 2021 05:00 AM)нα¢кєя Wrote: Beef would fail if its an HTTPS website with HSTS enabled headers as the bettercap would fail. Bettercap works in HTTP only scenarios , it may show the https traffic but capturing the credentials or injecting JS would be difficult unless you are able to perform a downgrade attack. I may be wrong too.
Okay lets say for example that everything is HTTP and none of the issues you stated are present. How do I setup beef of bettercap to hook all browsers going through the reverse proxy?
RE: beEF + bettercap + reverse proxy - нα¢кєя - Apr 22, 2021
Well just run the bettercap on your system