[BlackCodez]

Hi,
i heard about exploit-kit to spread botnets,
but i didn't understand properly how it works, i mean one time i hear that it spread with a website or something like that but im not sure that it's correct because it will be something like JDB.

PLEASE I NEED DETAILED NOOB FRIENDLY EXPLAINTION :D

Well, when you visit a website with a exploit-kit iframed or installed directly on the website.
The exploit-kit will launch multiple exploits against your computer and try to send a PAYLOAD which is the "virus". If it's successful, congratulations then you recieve a bot or a slave or a zombie or whatever. If you wan't to know more just PM me. And depending on the quality of the exploits on the exploit-kit the higher success rate of infecting peoples you'll have.
Let's say that you have this super duper awesome java silent 0-day exploit that works on every version on the exploit kit that infects everyone that have java, you will get rich as fuck.
And then you have an adobe exploit that also works on every version then you'll have a success rate of 90% at least.
So let's say that you send 1 million people to the hacked website with an iframe (a little frame with a website in it on a website) on you'll have 900 infected machines.
But this is a scenario that most likeley will never happen :)

[Kim Jong-Illest]

Like the user said above, essentially the exploit kit will attempt to use a variety of exploits on the targeted computer until one works. Generally the best way to safeguard from exploit kits is to update/update/update.

[Vincenzo‎]

Exploit kits are filled with private/public exploits to ensure maximum execution rate, you can also buy human traffic to make the process easier and faster.

[ZEREK]

Well, when you visit a website with a exploit-kit iframed or installed directly on the website.
The exploit-kit will launch multiple exploits against your computer and try to send a PAYLOAD which is the "virus". If it's successful, congratulations then you recieve a bot or a slave or a zombie or whatever. If you wan't to know more just PM me. And depending on the quality of the exploits on the exploit-kit the higher success rate of infecting peoples you'll have.
Let's say that you have this super duper awesome java silent 0-day exploit that works on every version on the exploit kit that infects everyone that have java, you will get rich as fuck.
And then you have an adobe exploit that also works on every version then you'll have a success rate of 90% at least.
So let's say that you send 1 million people to the hacked website with an iframe (a little frame with a website in it on a website) on you'll have 900 infected machines.
But this is a scenario that most likeley will never happen :)

That was a good answer i always wanted to know how they work had a basic ideal but not so much information

[eddymore22]

If i can get good exploit kit like doc,pdf FUD i will go purchasebut i dont know how much it cost

[BlackCodez]

---

But what is a 0 day exploit?How and when it works?Why it's diffucult to find?Why microsoft or oracle didn't patch that exploit?Why it's most dangerous?

A 0-day exploit is like all of the others exploits except one thing, the developers don't know about it yet or haven't made a patch for it yet. And the reason why it's so hard to find is because let's say you find a 0-day exploit on skype which would let you earn a shit ton of cash, would you go here on HF and say YOOO! I got a skype 0-day let's me infect anyone, even Bill Gates.
1. The developers would probably patch it in a matter of hours.
2. Obviously you wouldn't earn any money on it.
You can buy them though, mostley on "underground" forum or at least a forum that isn't as large as HF.
They're also available sometimes on exploit-db for sale, but if you really wan't a quality 0-day you should look more into system penetration and how to find vulnerabilities and how to code exploits to them yourself.
I'm also going to learn that. I got the book and everything, already know pretty much but going to advance, so if you need a learning buddy just hmu bro.