[Furz]

I have access to my network and want to infect other PC's on the LAN
Could someone give me an easy guide for something like this? Maybe ARP poisoning or such?

[iCasher]

I have access to my network and want to infect other PC's on the LAN
Could someone give me an easy guide for something like this? Maybe ARP poisoning or such?

- build your payload , encrypt it from AV's
- build fake page to SE your victims
- edit your dns to redirect all the network users to your fake download page before they go to anywebsite
- wait your victims

this is very basic and most effictive way to infect other PC's on the same lan , ofc there are vulnerability's you can use and long way for checking open ports on each machine or running services etc but i suggest you the first option

[National Crime Agency UK]

I have access to my network and want to infect other PC's on the LAN
Could someone give me an easy guide for something like this? Maybe ARP poisoning or such?

@Furz - In your signature it mentions "In every affair consider what precedes and follows, and then undertake it." In this affair what precedes is a prison sentence.

- build your payload , encrypt it from AV's
- build fake page to SE your victims
- edit your dns to redirect all the network users to your fake download page before they go to anywebsite
- wait your victims

this is very basic and most effictive way to infect other PC's on the same lan , ofc there are vulnerability's you can use and long way for checking open ports on each machine or running services etc but i suggest you the first option

Our advice don't do what @iCasher has described it is illegal.

Learn about UK Cyber legislation and find resources to utilise your skills legally by visiting cyberchoices.uk

Please note: This is not a crime reporting channel, to report a crime contact your local police force. If you are in the UK you can report fraud and cyber crime at Action Fraud UK.

[Sand Ferret]

@Furz - In your signature it mentions "In every affair consider what precedes and follows, and then undertake it." In this affair what precedes is a prison sentence.


Our advice don't do what @iCasher has described it is illegal.

Learn about UK Cyber legislation and find resources to utilise your skills legally by visiting cyberchoices.uk

Please note: This is not a crime reporting channel, to report a crime contact your local police force. If you are in the UK you can report fraud and cyber crime at Action Fraud UK.

Jesus Christ reading your replies is painful.

[Dread.Reaper]

Jesus Christ reading your replies is painful.

🤣
Yea but you gotta give them some credit for their scare tactics. On. Every. Single. Fucking. Aspect.

@Furz - In your signature it mentions "In every affair consider what precedes and follows, and then undertake it." In this affair what precedes is a prison sentence.

Like holy shit bruh... Someone give them a Dilaudid. 🤦‍♂️

[DramaKing]

I have access to my network and want to infect other PC's on the LAN
Could someone give me an easy guide for something like this? Maybe ARP poisoning or such?

There's no easy way to infect PC's with ARP poisoning. A tool like Backdoor Factory can be made to inject malware into PEs. I think I have a GitHub repo saved with a fork of BdF designed to integrate with bettercap, not that I've ever figured it out. If you want to make the exercise realistic, any detectable signatures in the payload will still be detected by AV. This will also only work on unsigned Windows executables or unsigned Linux packages.

I prefer password attacks and RCE to infect PC's, but if the challenge is worth it to you, you simply may need to mostly figure things out on your own.

---

- build your payload , encrypt it from AV's
- build fake page to SE your victims
- edit your dns to redirect all the network users to your fake download page before they go to anywebsite
- wait your victims

this is very basic and most effictive way to infect other PC's on the same lan , ofc there are vulnerability's you can use and long way for checking open ports on each machine or running services etc but i suggest you the first option

You forgot to add the important disclaimer that DNS spoofing only works on non-HSTS websites.