(Nov 22, 2017 01:52 PM)Тоху Wrote:  Pretty sure you're going to need an exploit to bypass that, as it's a security feature.  Take a look at this site here for some ideas on what you can do (keep in mind up to date users will have this patched, use older versions that aren't fixed to test):

(Nov 22, 2017 02:50 PM)Applefruit Wrote:  Thank you , I'll look in to that.
I've currently made a PNG to be an .exe.
And the .exe runs fine now. But this only would've been excuted if the user fully downloaded the PNG.

Which is fine , I can still work with that.
But finding a correct exploit would be even better.

:)

(Nov 22, 2017 02:48 PM)Charger Wrote:  LOL.

You are asking for a drive by.

If you want one that works 20% of the time then you'll be paying x,xxx.

(Nov 22, 2017 02:52 PM)Charger Wrote:  You can't do what you are trying to do.

Bind an EXE to a PNG, downloading it as a PNG, and then trying to execute it from the browser won't work. Plain and simple. 


You won't find ANY public or free way to do it. You'll have to find a CVE or an exploit kit that takes advantage of the CVE.

(Nov 22, 2017 02:52 PM)Applefruit Wrote:  I didn't really know how to call it, because I'm not that familiar with it. I'm a gamedeveloper from origen.
The bot is able to generate a number above something with x,xxx  👹 
But I'd love to learn more about it, Do you have a link to a "Drive by" a working one.

Thanks :)

(Nov 22, 2017 02:54 PM)Charger Wrote:  You're not understanding what I am saying.

x,xxx is the dollar amount you'll pay. 

A kit with a 20% rate last went for about $500 a week or ~$1500 a month. 

There are old, outdated exploit kits that you can find online that will probably have a 1-3% execution rate in 3rd world countries.