Hi , I'm creating a infected websites which needs to automatictly download files from a database on to the users computer.
Everything is almost working, But when I go on to the website it gets a pop up and notification off the files being downloaded.
Is there a bypass to do that.
Kind regards
Applefruit :)
Pretty sure you're going to need an exploit to bypass that, as it's a security feature. Take a look at this site here for some ideas on what you can do (keep in mind up to date users will have this patched, use older versions that aren't fixed to test):
https://www.exploit-db.com/
Does anyone want to mine bitcoin with me in 2011?
LOL.
You are asking for a drive by.
If you want one that works 20% of the time then you'll be paying x,xxx.
(Nov 22, 2017 01:52 PM)Тоху Wrote: Pretty sure you're going to need an exploit to bypass that, as it's a security feature. Take a look at this site here for some ideas on what you can do (keep in mind up to date users will have this patched, use older versions that aren't fixed to test):
Thank you , I'll look in to that.
I've currently made a PNG to be an .exe.
And the .exe runs fine now. But this only would've been excuted if the user fully downloaded the PNG.
Which is fine , I can still work with that.
But finding a correct exploit would be even better.
:)
(Nov 22, 2017 02:50 PM)Applefruit Wrote: Thank you , I'll look in to that.
I've currently made a PNG to be an .exe.
And the .exe runs fine now. But this only would've been excuted if the user fully downloaded the PNG.
Which is fine , I can still work with that.
But finding a correct exploit would be even better.
:)
You can't do what you are trying to do.
Bind an EXE to a PNG, downloading it as a PNG, and then trying to execute it from the browser won't work. Plain and simple.
You won't find ANY public or free way to do it. You'll have to find a CVE or an exploit kit that takes advantage of the CVE.
Nov 22, 2017 02:52 PM
(This post was last modified: Nov 22, 2017 02:53 PM by Applefruit.)
(Nov 22, 2017 02:48 PM)Charger Wrote: LOL.
You are asking for a drive by.
If you want one that works 20% of the time then you'll be paying x,xxx.
I didn't really know how to call it, because I'm not that familiar with it. I'm a gamedeveloper from origen.
The bot is able to generate a number above something with x,xxx 👹
But I'd love to learn more about it, Do you have a link to a "Drive by" a working one.
Thanks :)
(Nov 22, 2017 02:52 PM)Charger Wrote: You can't do what you are trying to do.
Bind an EXE to a PNG, downloading it as a PNG, and then trying to execute it from the browser won't work. Plain and simple.
You won't find ANY public or free way to do it. You'll have to find a CVE or an exploit kit that takes advantage of the CVE.
Actually this would be excuted once the PNG landed in a folder. This is when the user actually extracted the downloaded file on he's computer.
(Nov 22, 2017 02:52 PM)Applefruit Wrote: I didn't really know how to call it, because I'm not that familiar with it. I'm a gamedeveloper from origen.
The bot is able to generate a number above something with x,xxx 👹
But I'd love to learn more about it, Do you have a link to a "Drive by" a working one.
Thanks :)
You're not understanding what I am saying.
x,xxx is the dollar amount you'll pay.
A kit with a 20% rate last went for about $500 a week or ~$1500 a month.
There are old, outdated exploit kits that you can find online that will probably have a 1-3% execution rate in 3rd world countries.
(Nov 22, 2017 02:54 PM)Charger Wrote: You're not understanding what I am saying.
x,xxx is the dollar amount you'll pay.
A kit with a 20% rate last went for about $500 a week or ~$1500 a month.
There are old, outdated exploit kits that you can find online that will probably have a 1-3% execution rate in 3rd world countries.
Ah I see now, Thanks for the information
|
