+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Executing .exe by user hitting "Run" (/showthread.php?tid=5958162)
Executing .exe by user hitting "Run" - Walther - Apr 8, 2019
Is it possible to execute a .exe in a way where when a visitor hits the landing page there is a "pop-up" or window prompt asking for permission to run the file. I know this was possible with Java driveby a while back but not sure if its still possible to run a stub directly from the landing page opposed to the user having to hit download than go to their Downloads folder to run.
RE: Executing .exe by user hitting "Run" - Tom Cruise - Apr 8, 2019
I have a similar vulnerability for that, it consists of abusing a popular bug bounty hacking site's report system where without rendering the source page you can still download the file (It is automatic not manual) and it asks to "run" or "save file"
(RFD) Reflected File Download
RE: Executing .exe by user hitting "Run" - Anova - Apr 8, 2019
does this involve the landing page you bought from stardex?
RE: Executing .exe by user hitting "Run" - Walther - Apr 8, 2019
I would add it to the landing page I purchased off him but have another "method" I want to try out which would work much better with the ability to execute the file with a simple click of "Run" opposed to the user having to download then run after they find the file download.
I purchased a silent java drive by years ago which worked great but only for a short time until it was patched.
RE: Executing .exe by user hitting "Run" - Anova - Apr 8, 2019
(Apr 8, 2019 10:48 PM)Walther Wrote: I would add it to the landing page I purchased off him but have another "method" I want to try out which would work much better with the ability to execute the file with a simple click of "Run" opposed to the user having to download then run after they find the file download.
I purchased a silent java drive by years ago which worked great but only for a short time until it was patched.
Ah yeah, JDBs were awesome lol. I'm not aware of anything similar to it right now.