Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
beefproject
GitHub Repository: beefproject/beef
Path: blob/master/modules/exploits/local_host/signed_applet_dropper/README.txt
1154 views
1
--- How to use this module ---
2
-- antisnatchor:
3
- the applet has been compiled with Java 1.6.0 update 0 in order to be compatible with every JRE > 1.6.x (1.7.x included)
4
- tested with IE8 on XP SP3, and IE10 on Win7
5
- tested with JRE 1.6.x and 1.7.x
6
7
- I advise you to recompile/re-sign the applet yourself, the following are the required steps to compile and self-sign the applet.
8
NOTE: Best results are obtained signing the applet with a valid Code Signing certificate.
9
10
- Ideally the dropper is a packed backdoor (Meterpreter?) that connects back to your server (for instance a Metasploit multi/handler).
11
12
1. compile the two classes
13
javac SignedApplet.java SM.java
14
15
2. create a JAR
16
jar cvf SignedApplet.jar SignedApplet.class SM.class
17
18
3. generate a keystore to self-sign the applet
19
keytool -keystore tmp -genkey
20
21
4. sign the applet
22
jarsigner -keystore tmp signedAppletCmdExec.jar mykey
23
24