config.yaml

#
# Copyright (c) 2006-2025 Wade Alcorn - [email protected]
# Browser Exploitation Framework (BeEF) - https://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
beef:
    module:
        vtiger_crm_upload_exploit:
            enable: true
            category: "Exploits"
            name: "VTiger CRM Upload Exploit"
            description: "This module demonstrates chained exploitation. It will upload and execute a reverse shell. The vulnerability is exploited in the CRM <a href=\"http://www.vtiger.com/\">vtiger 5.0.4</a><br />The default PHP requires a listener, so don't forget to start one, for example: nc -l 8888."
            authors: ["wade", "bm", "pipes", "xntrik", "yorikv"]
            target:
                working: ["ALL"]