Ratters, can you improve this? (Google Chrome spreading page)

Ratters, can you improve this? (Google Chrome spreading page) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Ratters, can you improve this? (Google Chrome spreading page) (/showthread.php?tid=6218359)

Ratters, can you improve this? (Google Chrome spreading page) - SceneWarrior01010 - Aug 23, 2022

I have something that detects which browser is being used, and displays a page depending on browser. This is what Chrome looks like and this is why I'm posting here I need ideas to improve the Google Chrome page to ensure more clicks/downloads.
https://prnt.sc/si7-LT1fxMp

Here's Firefox https://prnt.sc/_ihEa8ZkUdBK (beautiful) I don't believe Firefox needs work.

But ideas for Chrome are needed. If you have any ideas for improvement please post.

If you'd like the other pages please let me know - I have a great one for Edge/IE.

The idea would be an attacker would iframe this page that detects the user agent/browser and displays the fake plugin missing page to try and get the victim to download the disguised payload.

I'm really needing work on Chrome ASAP if you're a good coder, please take a look at this.

I can't upload the Chrome files here but if you post/PM I'll send you a link.

RE: Ratters, can you improve this? (Google Chrome spreading page) - hydra11 - Aug 23, 2022

nobody do this because so many spammers sue the add-on method and ppl will just avoid this kind of page, better try browser not supported method where you just have to make your own chromium compile and bind with your dropper

RE: Ratters, can you improve this? (Google Chrome spreading page) - SceneWarrior01010 - Aug 23, 2022

(Aug 23, 2022 03:51 AM)hydra11 Wrote: nobody do this because so many spammers sue the add-on method and ppl will just avoid this kind of page, better try browser not supported method where you just have to make your own chromium compile and bind with your dropper

Browser not supported? Any examples? Could you elaborate? I plan on iframing these missing plugin pages on many hacked websites, so they will get tons of traffic. It just simply needs to be convincing enough for them to believe it's the actual browser informing them of a required plugin.

Firefox will have a lot of success. But mainly people use Chrome. If anyone has any ideas on how to simply instruct them to download the plugin/file and make it look legit please let me know.

I also know which files to use to ensure a FUD download in chrome/no warnings.

More on that when someone contributes. Give me your ideas! Even if you can't code, if you have an idea, I can have it made.

Thanks!

RE: Ratters, can you improve this? (Google Chrome spreading page) - hydra11 - Aug 23, 2022

(Aug 23, 2022 04:08 AM)SceneWarrior01010 Wrote: Browser not supported? Any examples? Could you elaborate? I plan on iframing these missing plugin pages on many hacked websites, so they will get tons of traffic. It just simply needs to be convincing enough for them to believe it's the actual browser informing them of a required plugin.

Firefox will have a lot of success. But mainly people use Chrome. If anyone has any ideas on how to simply instruct them to download the plugin/file and make it look legit please let me know.

I also know which files to use to ensure a FUD download in chrome/no warnings.

More on that when someone contributes. Give me your ideas! Even if you can't code, if you have an idea, I can have it made.

Thanks!

[Image: outdated-browser-detected-virus.jpg]

so instead of add-on you can redirect to your own web site where compiled chromium with your payload hosted