ET WEB_CLIENT The Browser Exploitation Framework (BeEF) Cookie (BEEFHOOK)
Sourceet/open
Fileemerging-web_client.rules
CreatedAugust 25, 2022
UpdatedAugust 14, 2026
Classificationattempted-user
alert http $HOME_NET any -> any any (msg:"ET WEB_CLIENT The Browser Exploitation Framework (BeEF) Cookie (BEEFHOOK)"; flow:established,to_server ; http.cookie; content:"BEEFHOOK="; startswith; fast_pattern; threshold:type limit, track by_src, seconds 60, count 1 ; reference:url,github.com/beefproject/beef ; classtype:attempted-user; sid:2038614; rev:2; metadata:attack_target Client_Endpoint, created_at 2022_08_25, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2026_08_14;)
References
Metadata
attack targetClient_Endpoint
created at2022_08_25
deploymentInternal
confidenceHigh
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2026_08_14
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!