Force Download Exploit ***PUBLIC RELEASE!***

[yoc_influenced68]

anyone know where to get a good keylogger for this purpose not the trojan most of u guyz are usin cuase its to easy to cancel and takes to long to download but i need a keylogger cuase its only like 40kb

 

[Sicloan]

Originally posted by tradewindrider

anyone know how to make .exf extension in the registry? and how to change trojan extension to .exf?

this is how i did, i opened up msdos (command prompt) and then moved my tojan to the file specified on the prompt (such as c:/documents settings/username/ ) then on command prompt type: ren [trojan name].exe [trojan name].exf

now look back at your trojan and it should be a .exf extension but it will not have a icon (correct me if im wrong, im on xp) simple as that =D

 

[tradewindrider]

thats just renaming the file, it doesnt give it the property to be opened form its location, does it?

 

[Sicloan]

i think thats all you have to do.. i got it to work for one of my victim's =D

 

[heaven_earth]

Originally posted by Turkey
heaven_earth i went on your site and my anti virus detected malicious script of something. However i don't know if it stoped it downlaoding or not. Can u tell me what file it is and where it downlaods to plz?

Ok umm if you did dl it then it should be in the same folder as kernel32 but named iexplore2 but i dont think you got it cas there has been no new ips on my list.txt of infected computers

 

[Turkey]

Originally posted by heaven_earth
Ok umm if you did dl it then it should be in the same folder as kernel32 but named iexplore2 but i dont think you got it cas there has been no new ips on my list.txt of infected computers

Was it a trojan that I could have downloaded? If it was which trojan were you using?

 

[PyroKid]

hey tradewindrider read my post it says how you do it. also if you want to see what i set the registry values to then check decrypt.txt in the zip file.

 

[tradewindrider]

pyro, i followed your post and made like 5 keys in one and i renamed my server from exe to xyz but the download box comes up when i put it on the site and i got win98se, oneyedmans force download worked on me though, so i must have configured the registry wrong, but i went over it and did the keys over and still nothing, download box comes up. i dont know wtf i did wrong

 

[Sicloan]

areyoufearless.com has a Internet Explorer(IE) dl exloit which you can download. There is a readme and instructions on the program =D but heres some more.

Download FE IE exlpoiter from www.areyoufearless.com. (menu:downloads folder/fearless software folder/internet exploits folder)

extract it, open FE exploiter. Specifiy the server, press encode server, and then create document. This creates a .mhtml document. Then you just upload this to any site, and send this page to people, or attach it to a webpage when they open the page a window will pop up with this page. (i.e. popup) and *bam*, they download it. Works on most types of Internet Explorer. when they dl it, it saves the server in the startup folder, and when they restart, the server opens and notifies you. you can use any server (smaller is recommended) check it out

note: i found this when searching the net for a version of Pyro's exploit for xp/me/nt. this one is way more affective and works perfectly.

 

[heaven_earth]

Originally posted by Turkey
Was it a trojan that I could have downloaded? If it was which trojan were you using?

NETDEVIL

 

[Evil_Wiper]

uhm dude some people in here says it contains virus / other people dont! So is it clean or not?...

 

[tradewindrider]

its clean, but encrypted and thats why its detected by virus software

 

[oneyedMan]

riCetasteyummy, welldone , u are the first person to be sent to the New section in the forums, to get your ****** account deleted.
I believe.

 

[ChillyWilly]

Question About Download Exploit

Ok i have the files all uploaded to my ftp, what site will it force them to download the files from? or how can i set it?

 

[Korittke]

migth also want to use the reply button ^^

 

[ChillyWilly]

wow, i didnt know u could make a new thread in a thread, wups that was an accident.

 

[Karma-1337]

Any way to change the HTML text that appears on the page? I mean if the force download exploit doesnt work on ie6.0 and above that page will make anyone instanly click cancel wouldnt it?

 

[PyroKid]

just look at the decrypt.txt file. once your done, reencrypt it. you can get the encrypter/decrypter at javascript.internet.com its the xor encryption

 

[tradewindrider]

i know this works on ie6 because i d/l oneyedman's automatically from his download exploit site and i have ie6 so now im thinking its because i have win98se that this worked. yesterday i tried to get my friend to d/l it and he has XP and he got the dialog box and his av detected it and the file was only 3kb.

 

[HellSavior]

My JVM gives a FileNotFoundException in regards to com.ms.activeX.ActiveXComponent.class..