+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Java drive-by [Tutorial] (/showthread.php?tid=482454)
Java drive-by [Tutorial] - Livewire - Jun 15, 2010
### [ Java Drive-by Tutorial ] ###
NOTE: Fileave no longer works, find your own hosting site and stop PMing me.
[What you will need]
● http://www.mediafire.com/?ekojo5wjzz4 [Java Applet]
● Your infected file.
● Fileave Account.
(http://www.fileave.com/signup.aspx)
[Uploading the files/Editing]
The files that I provided in the .zip are:
[img]http://img717.imageshack.us/img717/1657/filesneeded.png[/img]
These files above need to be uploaded to www.fileave.com, so here is what you need to go do now.
Log in to your account at www.fileave.com, and press the 'Upload' button located here:
[img]http://img341.imageshack.us/img341/1055/whattopress.png[/img]
[*] Upload all the files within the Java folder.
Under 'Files' it should now look something like this:
[img]http://img191.imageshack.us/img191/2921/replacement1.png[/img]
[Attaching your infected file]
Upload your infected file to www.fileave.com.
Note: If it is not crypted, get it crypted.
Recommended Crypter: https://hackforums.net/showthread.php?tid=382789&page=1
Now that your infected file is uploaded, your list should now look something like this:
[img]http://img375.imageshack.us/img375/8100/replacement2.png[/img][
My infected file is outlined in red.
Notice the Direct Link located here:
[img]http://img88.imageshack.us/img88/3348/replacement3.png[/img]
Example: http://example.fileave.com/test.exe [Direct Link]
Copy+paste your direct link, you are going to be needing it very shortly.
Now, what you are going to need to do,
Stay in the files section of the website, but press the edit button on index2. Indicated below:
[img]http://img7.imageshack.us/img7/8397/index2s.png[/img]
Once you are in the edit menu, you need to take your Direct link that I told you to copy+paste earlier, and put it in these places:
[img]http://img22.imageshack.us/img22/2571/info1d.png[/img]
&
[img]http://img41.imageshack.us/img41/2553/info2y.png[/img]
[Final Touches]
The Link that is used for infecting is the link for index.
[img]http://img197.imageshack.us/img197/1091/indexsz.png[/img]
Now that you have successfully set up a Java drive-by, you are going to need to do some things to make it more belivable.
Go to 'www.dot.tk'
And fill in as such:
[img]http://img256.imageshack.us/img256/4458/dottk2.png[/img]
From there, you are going to shorten the link from:
'http://img256.imageshack.us/img256/4458/dottk2.png'
To something like
'http://www.imagehosting.tk'
Making it more believable and what not(:
Enjoy!
-- Warning --
Java Drive-by's are becoming more noticable by AV's nowadays.
Java Drive-by's are becoming more noticable by AV's nowadays.
Don't think Java drive-by's are for you?
Try Torrent spreading! Tutorial here: https://hackforums.net/showthread.php?tid=482215
If you enjoyed this tutorial, I have written others! Check 'em out!
Code
https://hackforums.net/showthread.php?tid=482688 - Spreading Your Virus [Methods][Tutorial]
https://hackforums.net/showthread.php?tid=482454 - Java drive-by [Tutorial]
https://hackforums.net/showthread.php?tid=482215 - How to spread your Rat or Bot through Torrents [Tutorial] + Binder/Crypter
https://hackforums.net/showthread.php?tid=475718 - How to set up Cybergate v1.05.1 [Tutorial]
https://hackforums.net/showthread.php?tid=463510 - [How to] Troll and get victims [Using Java drive-by]
https://hackforums.net/showthread.php?tid=272968 - [Tutorial] How to get someone's Ip through Steam/Css
https://hackforums.net/showthread.php?tid=414209 - Want to get started hacking? [Tutorial]
https://hackforums.net/showthread.php?tid=414676 - Intermeridate hacking [Tutorial]
https://hackforums.net/showthread.php?tid=439796 - Hacking Introduction [Tut]* - Drooly - Jun 15, 2010
Very well explained! Easy to follow, thanks!
* - Livewire - Jun 15, 2010
(Jun 15, 2010 04:03 AM)Drooly Wrote: Very well explained! Easy to follow, thanks!
Your welcome, glad you enjoyed it.
* - joes925 - Jun 15, 2010
The client.jar is detected.
How to make it FUD?
* - Livewire - Jun 15, 2010
(Jun 15, 2010 04:14 AM)joes925 Wrote: The client.jar is detected.
How to make it FUD?
I don't believe it is possible to FUD the .jar file.
Has to be used as is, until someone finds a different method for Java drive-bys.
* - harrypage - Jun 15, 2010
thanks, very similar to another guide i have seen here. almost exactly the same pics, i guess this doesn't make it FUD?
* - Livewire - Jun 15, 2010
(Jun 15, 2010 04:18 AM)harrypage Wrote: thanks, very similar to another guide i have seen here. almost exactly the same pics, i guess this doesn't make it FUD?
:p I took all these screenshots myself.
No it is not FUD.
* - Arron XR - Jun 15, 2010
there are loads of TuTs for this
* - harrypage - Jun 15, 2010
Is it possible for a drive by to be FUD?
* - Livewire - Jun 15, 2010
(Jun 15, 2010 04:26 AM)Arron XR Wrote: there are loads of TuTs for this
Just got bored, wanted to do something. I have a bunch of other tuts anyways(:
* - iConixx - Jun 15, 2010
i thought these only work now on people with windows xp??
* - Livewire - Jun 15, 2010
(Jun 15, 2010 04:58 AM)iConixx Wrote: i thought these only work now on people with windows xp??
I don't believe so, don't quote me though as I'm not entirely sure, but i believe I have infected people running vista/w7 via Java drive-by.
* - SryIPwnedU - Jun 15, 2010
(Jun 15, 2010 05:02 AM)Livewire Wrote: I don't believe so, don't quote me though as I'm not entirely sure, but i believe I have infected people running vista/w7 via Java drive-by.
As have I.
I just think this drive-by method has seen its final days.
* - Livewire - Jun 15, 2010
(Jun 15, 2010 05:55 AM)SryIPwnedU Wrote: As have I.
I just think this drive-by method has seen its final days.
It's not at it's final days yet. I have another Java drive-by that's a little less infected than this one. It's 7/17, (or something like that :p ) I don't plan on using java drive-by's much anymore though until a new FUD way is released ;D I'll stick to torrent spreading.
* - WoOkieE - Jul 20, 2010
i dunno , im getting JAVA Error once i try infecting myself
i've disable Firewall / AV