# beefproject/beef

The Browser Exploitation Framework Project

Repository: https://github.com/beefproject/beef
Canonical: https://ross.abutalabs.com/products/beef
Homepage: https://beefproject.com
Language: JavaScript
License Family: other
Last push: 2026-08-25T13:08:39+00:00

## Health v2 (maintenance only)
Score: 72/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 21, longevity 100
- inputs: {"age_days": 5397, "days_push": 8, "days_rel": 313, "gap_med": null, "n_releases_24m": 1}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 10983, forks 2368 (observed 2026-08-28T04:10:44.972043+00:00)

## What it is
BeEF (Browser Exploitation Framework) is a penetration testing tool focused on the web browser, hooking one or more browsers and using them as beachheads for launching directed command modules and client-side attacks. It provides a web-based control panel for managing hooked browsers, session management, and an extensive library of browser-based command modules.

## Use cases
- assess client-side security posture of a target environment
- hook web browsers and launch command modules
- test browser-based attack vectors during a pentest
- demonstrate social engineering attacks against browsers
- gather information from hooked browser sessions
- evaluate exploitability behind a hardened network perimeter

## When to choose
- you are a professional penetration tester assessing client-side/browser vulnerabilities
- you need to demonstrate browser-borne attack vectors to stakeholders
- you want a framework with an extensible command module API for browser exploitation

## When to avoid
- you need a tool that runs on Windows (not supported)
- you are looking for a network perimeter or server-side scanner
- you lack authorization to test the target systems

## Facets
- artifact type: framework
- maturity: active
- function: penetration-testing, security, web-framework, developer-tools
- domain: security, penetration-testing, web-development
- platform: ruby
- tags: browser-exploitation, client-side-attacks, browser-hooking, pentest-framework, social-engineering, command-modules, linux, macos, web-server, nodejs

## Member repositories
- beefproject/beef (main) score 72

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:10:44.972043+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:17:15.162718+00:00, confidence not recorded.
  - readme: https://github.com/beefproject/beef (fetched 2026-08-28T04:10:44.972043+00:00, sha 7da96fa84122)
  - homepage: https://beefproject.com (fetched 2026-08-29T08:16:07.826261+00:00, sha 3170d191cb7b)
- Data as of 2026-08-30T08:39:29.467469+00:00.