Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Spreading] A Gift For All Ratters [Browser Drive-bys 2017]

Hello friends, I'm back after a long vacation. I have nothing better to do so I'm going to try and revive this section. I want to bring a finished alternative for Java Drive-bys for each browser, but I need your help!

Here's a drive-by kit you can customise. I tried to make them as convincing as possible for each browser (currently just firefox and chrome) by using default icons/themes. They still need work so I'm hoping to get some ideas or possibly development on this here. I need people with the right mindset to leave feedback and possibly share how you're customising it. We still need pages for IE and Edge, although you can use the chrome/firefox one for them if you're lazy.

This is very easy to customise/edit and I shouldn't need to explain where you need to put your links and how to edit the HTML. Take advantage of user agent detection and be creative! This is a beta version made for customising. Hopefully we'll get a good end result when it's all finished.

This could work great if you have loads of FTP logins and use an iframer like FTP Admin or Ziframer. If you'd like a bunch of FTP's, feel free to PM me and I'll send you some. I have many that are unchecked and could be websites with traffic. Alternatively you can set this up your own website/blog/niche.

For noobies, just replace the download link to putty in index.html with your servers/downloaders.

So here's the drive-by pages for Chrome and Firefox so far.

Firefox
Spoiler (Click to View)

Chrome
Spoiler (Click to View)

I have posted threads like this in the past which had great feedback. I want to keep this one up and with your help and feedback get a finished product for all browsers. 🤝

Download Browser Drive-by Kit: http://ge.tt/8SHGB3k2
I haven't checked this out yet, but the screenshots look pretty good.
So these download and execute the file?
Which CVE exploits are used in the above download?
well thank you for sharing to all members i m not that interested in spreading but i love to check things
i have download it and open the chrome one to test it and i can see you need to click down on the left to activate the popup
i think this is a problem or i m wrong ?
Not really much of a driveby?
http://prntscr.com/f6a6sq
(May 10, 2017 09:09 AM)05317832892 Wrote:  So these download and execute the file?
(May 10, 2017 09:30 AM)Hoodie+ Wrote:  Which CVE exploits are used in the above download?
This is just a browser pop-up. you can setup it on website and when someone hit Install plugin/add extension he will download executable file, he still need to run it
(May 10, 2017 09:52 AM)Sheeple Wrote:  Not really much of a driveby?
http://prntscr.com/f6a6sq

You're not supposed to use a .exe as the download in Chrome as this will throw off warnings. I recommend using another type of downloader like .js or .vbe. Alternatively host your .exe on a trusted website. 🤝

I need feedback on this. That's the main reason for opening the thread. Let me know what you'd use for everything.
(May 10, 2017 10:05 AM)Hypnotist Wrote:  You're not supposed to use a .exe as the download in Chrome as this will throw off warnings. I recommend using another type of downloader like .js or .vbe. Alternatively host your .exe on a trusted website. 🤝

I need feedback on this. That's the main reason for opening the thread. Let me know what you'd use for everything.

So if I ised this with a vbs downloader for example, as soon as the person clicks the fake plugin button the vbs script will be executed?
(May 10, 2017 12:54 PM)yotoprules Wrote:  So if I ised this with a vbs downloader for example, as soon as the person clicks the fake plugin button the vbs script will be executed?

No, it will just leave out warnings in chrome. You have to mess about and have some trial and error with each browser to find the right file types to use. The less warnings the better. The less clicks the better. 🤝
Thanks a lot for those scripts .
Appreciated :) ;)
That looks amazing i thought this wasnt a thing anymore
This isn't a drive by... It's just a web template to download a file, it doesn't execute it on a page visit.
[Image: boostdroid-signature.gif]
(May 10, 2017 08:21 AM)Hypnotist Wrote:  Hello friends, I'm back after a long vacation. I have nothing better to do so I'm going to try and revive this section. I want to bring a finished alternative for Java Drive-bys for each browser, but I need your help!

Here's a drive-by kit you can customise. I tried to make them as convincing as possible for each browser (currently just firefox and chrome) by using default icons/themes. They still need work so I'm hoping to get some ideas or possibly development on this here. I need people with the right mindset to leave feedback and possibly share how you're customising it. We still need pages for IE and Edge, although you can use the chrome/firefox one for them if you're lazy.

This is very easy to customise/edit and I shouldn't need to explain where you need to put your links and how to edit the HTML. Take advantage of user agent detection and be creative! This is a beta version made for customising. Hopefully we'll get a good end result when it's all finished.

This could work great if you have loads of FTP logins and use an iframer like FTP Admin or Ziframer. If you'd like a bunch of FTP's, feel free to PM me and I'll send you some. I have many that are unchecked and could be websites with traffic. Alternatively you can set this up your own website/blog/niche.

For noobies, just replace the download link to putty in index.html with your servers/downloaders.

So here's the drive-by pages for Chrome and Firefox so far.

Firefox
Spoiler (Click to View)

Chrome
Spoiler (Click to View)

I have posted threads like this in the past which had great feedback. I want to keep this one up and with your help and feedback get a finished product for all browsers. 🤝

Download Browser Drive-by Kit: http://ge.tt/8SHGB3k2

This actually looks really good. Checked out your code, nice job man.
(May 10, 2017 09:51 AM)3azraiell Wrote:  well thank you for sharing to all members i m not that interested in spreading but i love to check things
i have download it and open the chrome one to test it and i can see you need to click down on the left to activate the popup
i think this is a problem or i m wrong ?

You need to be good in html / css and js to modify it easily.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Matrix-4329 hours ago 123 12,658 9 hours ago
Last Post: eliotjames
by Eternal BlueAug 1, 2025 11:21 AM 2 445 Aug 1, 2025 11:21 AM
Last Post: SlothP
by MStreeterApr 10, 2023 03:56 AM 1 397 Apr 10, 2023 03:56 AM
Last Post: damonsalvatore