[MoPhaux]

This is my first post here, dont tear me up. :P

This is the scenario, hypothetically. I have a server hosting some web applications and I am using an apache server as a reverse proxy to point to the applications. I want to use beEF to hook everything flowing through the reverse proxy. Is this possible? Either with beEF as a standalone or with beEF + bettercap? In my head it seems like a simple task but I cant seem to figure it out. Any help or thoughts would be greatly appreciated.

[нα¢кєя]

Beef would fail if its an HTTPS website with HSTS enabled headers as the bettercap would fail. Bettercap works in HTTP only scenarios , it may show the https traffic but capturing the credentials or injecting JS would be difficult unless you are able to perform a downgrade attack. I may be wrong too.

[MoPhaux]

Beef would fail if its an HTTPS website with HSTS enabled headers as the bettercap would fail. Bettercap works in HTTP only scenarios , it may show the https traffic but capturing the credentials or injecting JS would be difficult unless you are able to perform a downgrade attack. I may be wrong too.

Okay lets say for example that everything is HTTP and none of the issues you stated are present. How do I setup beef of bettercap to hook all browsers going through the reverse proxy?

[нα¢кєя]

Well just run the bettercap on your system