ET WEB_CLIENT The Browser Exploitation Framework (BeEF) Module in use
Sourceet/open
Fileemerging-web_client.rules
CreatedJune 19, 2017
UpdatedAugust 14, 2026
Classificationattempted-user
alert http any any -> $HOME_NET any (msg:"ET WEB_CLIENT The Browser Exploitation Framework (BeEF) Module in use"; flow:established,to_client ; file.data; content:"beef.websocket.send"; fast_pattern; pcre:"/^\s*?\(/Rs"; content:"beef.encode.base64.encode"; pcre:"/^\s*?\(/Rs"; classtype:attempted-user; sid:2024415; rev:4; metadata:affected_product Windows_Client_Apps, attack_target Client_Endpoint, created_at 2017_06_19, deployment Perimeter, deployment Internal, performance_impact Moderate, confidence Medium, signature_severity Major, updated_at 2026_08_14;)
Metadata
affected productWindows_Client_Apps
attack targetClient_Endpoint
created at2017_06_19
deploymentInternal
performance impactModerate
confidenceMedium
signature severityMajor
updated at2026_08_14
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!