-4

I want to use BeEF-XSS Framework over WAN (for educational purposes). The only problem is that my ISP is blocking port 3000. So, after some research, I found this page that says:

However, beef-xss runs as a user by that name in Kali, and standard users cannot use privileged ports (below 1024). There's several methods of fixing this, including a redirect with iptables. However, the best method seems to be using authbind.

I'm a Linux newbie, so can't get enough on those commands and configuration.

  • So, I want to know if there is any workaround to change default port for BeEF from 3000 to something that my ISP doesn't block. If yes, then how to do it?

  • Also, do I need to learn how to use authbind?

0

BeefXSS stores its configuration in a file called config.yaml. You can change the port in there

http:
    debug: false
    host: "0.0.0.0"
    port: "3000" # Local port webserver is running on

    # If BeEF is running behind a reverse proxy or NAT
    #  set the public hostname and port here
    public: "8.7.6.5"
    public_port: "3000"

    dns: "localhost" 
    web_ui_basepath: "/ui"
    hook_file: "/hook.js" 
    hook_session_name: "BEEFHOOK"
    session_cookie_name: "BEEFSESSION"

Source: https://github.com/beefproject/beef/wiki/Configuration#web-server-configuration

  • Do I need to use authbind to change the port below 1024 ? – Vedansh Agrawal Apr 12 '18 at 1:02
  • @VedanshAgrawal You would do well to google these kinds of questions. By merely googling "beefxss authbind" i found the answer to your question in the first search result. – d0nut Apr 12 '18 at 22:46
  • @VedanshAgrawal if this answer helped you, you should accept it. – d0nut Apr 13 '18 at 0:18
  • When I search on google, the first site that appears is which I mentioned above and the second is my own question. – Vedansh Agrawal Apr 13 '18 at 0:54
  • No offense but your answer didn't help me. – Vedansh Agrawal Apr 13 '18 at 0:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.