Is it possible to run the tool called BeEF to do penetration testing on real domains like example.com? As far as I know, BeEF can only be used within localhost.

I can only test my site for XSS on the real domain because of the database running.

1 Answer 1


Yes, it's absolutely possible to use this tool in public...


Beef is a browser exploitation tool, not a server exploitation tool. If you use beef to attack browsers of other people, who have not given explicit consent to being attacked, then you are likely committing an unlawful act, depending on your jurisdiction.

So yes, technically it is possible. But no, it is likely not lawful and I would recommend against doing it.

  • 1
    @schroeder I wish I could at least say goodbye to my friends, but this will have to do. I can tell I am no longer welcome here by the powers that be, so I'll exit stage left. It's been lovely. I'll miss you all.
    – user163495
    Jun 15, 2022 at 16:11
  • Well, then I'm sorry that things didn't work out. You always did a great job here. I'll miss it.
    – user163495
    Jun 15, 2022 at 16:30
  • 3
    Sorry, then. See you and thanks for all your contributions.
    – schroeder
    Jun 15, 2022 at 16:30
  • 4
    I'll miss you and your answers and comments as well, @MechMK1.
    – vidarlo
    Jun 15, 2022 at 17:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.