[Theodore Evelyn Mosby]

Hi,
i heard about exploit-kit to spread botnets,
but i didn't understand properly how it works, i mean one time i hear that it spread with a website or something like that but im not sure that it's correct because it will be something like JDB.

PLEASE I NEED DETAILED NOOB FRIENDLY EXPLAINTION :D

[BlackCodez]

Hi,
i heard about exploit-kit to spread botnets,
but i didn't understand properly how it works, i mean one time i hear that it spread with a website or something like that but im not sure that it's correct because it will be something like JDB.

PLEASE I NEED DETAILED NOOB FRIENDLY EXPLAINTION :D

Well, when you visit a website with a exploit-kit iframed or installed directly on the website.
The exploit-kit will launch multiple exploits against your computer and try to send a PAYLOAD which is the "virus". If it's successful, congratulations then you recieve a bot or a slave or a zombie or whatever. If you wan't to know more just PM me. And depending on the quality of the exploits on the exploit-kit the higher success rate of infecting peoples you'll have.
Let's say that you have this super duper awesome java silent 0-day exploit that works on every version on the exploit kit that infects everyone that have java, you will get rich as fuck.
And then you have an adobe exploit that also works on every version then you'll have a success rate of 90% at least.
So let's say that you send 1 million people to the hacked website with an iframe (a little frame with a website in it on a website) on you'll have 900 infected machines.
But this is a scenario that most likeley will never happen :)

[Kim Jong-Illest]

Like the user said above, essentially the exploit kit will attempt to use a variety of exploits on the targeted computer until one works. Generally the best way to safeguard from exploit kits is to update/update/update.

[Vincenzo‎]

Exploit kits are filled with private/public exploits to ensure maximum execution rate, you can also buy human traffic to make the process easier and faster.

[Private666]

With exploit packs the bots are fresh and not over used unlike most bot sellers here on HF.

[Theodore Evelyn Mosby]

Well, when you visit a website with a exploit-kit iframed or installed directly on the website.
The exploit-kit will launch multiple exploits against your computer and try to send a PAYLOAD which is the "virus". If it's successful, congratulations then you recieve a bot or a slave or a zombie or whatever. If you wan't to know more just PM me. And depending on the quality of the exploits on the exploit-kit the higher success rate of infecting peoples you'll have.
Let's say that you have this super duper awesome java silent 0-day exploit that works on every version on the exploit kit that infects everyone that have java, you will get rich as fuck.
And then you have an adobe exploit that also works on every version then you'll have a success rate of 90% at least.
So let's say that you send 1 million people to the hacked website with an iframe (a little frame with a website in it on a website) on you'll have 900 infected machines.
But this is a scenario that most likeley will never happen :)

So the exploit kit's are a JDB variant with more success rate?

---

Like the user said above, essentially the exploit kit will attempt to use a variety of exploits on the targeted computer until one works. Generally the best way to safeguard from exploit kits is to update/update/update.

What you mean with "update/update/update" ?

---

Exploit kits are filled with private/public exploits to ensure maximum execution rate, you can also buy human traffic to make the process easier and faster.

That's one of the best spread method.But how's the cost of a good exploit-kit?

---

With exploit packs the bots are fresh and not over used unlike most bot sellers here on HF.

But seems, a quite famous method because it's very efficent, so which bot in commerce(obviously private botnet's are best in botkilling)has the best botkiller?

[xyfir]

An exploit-kit will try to infect systems through vulnerabilities in the browser or things like Flash or Java. The user above was saying the best way to avoid being infected by one is to keep everything on your system up to date so you're at least protected against known exploits.

[Theodore Evelyn Mosby]

An exploit-kit will try to infect systems through vulnerabilities in the browser or things like Flash or Java. The user above was saying the best way to avoid being infected by one is to keep everything on your system up to date so you're at least protected against known exploits.

Thank you very much 🤝
But aren't out there many private exploit-kits?Is the O.S. a significative object for this malware?I mean if i have mac os x i will have less possibilities to be infected against the windows systems for example?

[SIM-1230922]

I don't really exactly know what they do.

I think they use exploits to infect you. These exploits can be through various of "programs" like flash and java.
I also know that they're really, really really expensive!

[xyfir]

Thank you very much 🤝
But aren't out there many private exploit-kits?Is the O.S. a significative object for this malware?I mean if i have mac os x i will have less possibilities to be infected against the windows systems for example?

Depends on what the kit is targeting. So if they're targeting a Windows system (like pretty much all of them do) the payload is most likely going to be an .exe. So if you're on OSX it won't do shit to you regardless of whether you're vulnerable.

And yes, there are private exploit-kits. Those will yield you the highest infection rates, especially if they contain 0day exploits.

[ZEREK]

Well, when you visit a website with a exploit-kit iframed or installed directly on the website.
The exploit-kit will launch multiple exploits against your computer and try to send a PAYLOAD which is the "virus". If it's successful, congratulations then you recieve a bot or a slave or a zombie or whatever. If you wan't to know more just PM me. And depending on the quality of the exploits on the exploit-kit the higher success rate of infecting peoples you'll have.
Let's say that you have this super duper awesome java silent 0-day exploit that works on every version on the exploit kit that infects everyone that have java, you will get rich as fuck.
And then you have an adobe exploit that also works on every version then you'll have a success rate of 90% at least.
So let's say that you send 1 million people to the hacked website with an iframe (a little frame with a website in it on a website) on you'll have 900 infected machines.
But this is a scenario that most likeley will never happen :)

That was a good answer i always wanted to know how they work had a basic ideal but not so much information

[๖ۣۜÑåzgйŀ]

Thank you very much 🤝
But aren't out there many private exploit-kits?Is the O.S. a significative object for this malware?I mean if i have mac os x i will have less possibilities to be infected against the windows systems for example?

some payloads use java instead of a native windows executable
so yes your system could get infected potentially

[Tiny Hippo]

Pretend Exploit Kit A has 5 exploits, let's just pretend it has 3 Java exploits, one Flash exploit and a Internet Explorer 0day. And to clarify, a 0 day is an exploit that has not been patched yet and extremely dangerous, 0days are extremely rare and hard to find.

You load the contents of Exploit Kit A onto a website. When a user visits the website, it will scan the user to see if they are running a vulnerable version of Java, Flash or Internet Explorer. For example, one of the Java exploits out of the 3 is CVE-2013-0422 (http://www.microsoft.com/security/portal...-2013-0422). If you read the description of CVE-2013-0422, every Java version under 10 is vulnerable and if the user is running 10 and under, they will be infected with the payload or the virus.

You can compare this to like pressure points on your friend. For example, you go to a website to look up pressure points and you come up with 5 different pressure points on the human body. You go up to your friend and test all of them and see if they work on him. Say you poke his wrist, and that doesn't work, you move on the next "exploit" if you will. You poke his waist, that doesn't work, you move on. Then you try to poke his neck and see if that works and it does. You successfully delivered the "virus" or in this case make him feel uncomfortable.

[Theodore Evelyn Mosby]

Pretend Exploit Kit A has 5 exploits, let's just pretend it has 3 Java exploits, one Flash exploit and a Internet Explorer 0day. And to clarify, a 0 day is an exploit that has not been patched yet and extremely dangerous, 0days are extremely rare and hard to find.

You load the contents of Exploit Kit A onto a website. When a user visits the website, it will scan the user to see if they are running a vulnerable version of Java, Flash or Internet Explorer. For example, one of the Java exploits out of the 3 is CVE-2013-0422 (http://www.microsoft.com/security/portal...-2013-0422). If you read the description of CVE-2013-0422, every Java version under 10 is vulnerable and if the user is running 10 and under, they will be infected with the payload or the virus.

You can compare this to like pressure points on your friend. For example, you go to a website to look up pressure points and you come up with 5 different pressure points on the human body. You go up to your friend and test all of them and see if they work on him. Say you poke his wrist, and that doesn't work, you move on the next "exploit" if you will. You poke his waist, that doesn't work, you move on. Then you try to poke his neck and see if that works and it does. You successfully delivered the "virus" or in this case make him feel uncomfortable.

---

Depends on what the kit is targeting. So if they're targeting a Windows system (like pretty much all of them do) the payload is most likely going to be an .exe. So if you're on OSX it won't do shit to you regardless of whether you're vulnerable.

And yes, there are private exploit-kits. Those will yield you the highest infection rates, especially if they contain 0day exploits.

But what is a 0 day exploit?How and when it works?Why it's diffucult to find?Why microsoft or oracle didn't patch that exploit?Why it's most dangerous?

[Willy Wanka]

---

But what is a 0 day exploit?How and when it works?Why it's diffucult to find?Why microsoft or oracle didn't patch that exploit?Why it's most dangerous?

A zero day is like a missing brick in a wall that the builder overlooked. their hard to find because they aren't usually over-looked and when the 0day get's public they patch it quickly and only because there's a limited amount of them in each update or they take awhile to find and abuse and because I'm assuming some 0days are useless which means only certain ones may be useful for certain thing's and it's dangerous because it's unknown the developer never excepted someone to use it so they probably have no defense to stop it. (This is all guess work I have a basic idea how this stuff work's considering I've never seen one or been explained them)