Which tool provides a threat actor a web console to manipulate users who are victims of cross-site scripting (XSS) attacks?
- Asterisk
- SET
- BeEF
- Nikto
Explanation & Hint: Browser Exploitation Framework (BeEF) is a tool that can be used to manipulate users by leveraging XSS vulnerabilities. The tool starts a web service on port 3000 by default. From there, the attacker can log in to a web console and manipulate users who are victims of XSS attacks. |