Backdooring PDF's With a Remote Administration Tool

Murdret

V.I.P
V.I.P
Joined
11 yrs. 9 mth. 3 days
Messages
502
Reaction score
8,701
Wallet
884$
Now let me explain how this exploit works. This is just a basic exploit that will open drops of a reverse_tcp meterpreter session on the victim when it's executed. Also, this exploit works while the PDF is open until it is migrated to another process.

What you need.

A PDF
A FUD Server
Metasploit


Always have your Metasploit up to date, other wise you'll get errors.
And make sure you don't put capital letters into metasploit, otherwise it will be detected as wrong, so follow the tutorial, and follow my spelling.

Note: Make sure you have your PDF file, and make sure you upload your FUD server to a service which supports direct links.
I recommend the following

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!

Please, Log in or Register to view URLs content!


I would also recommend you have Metasploit installed correctly on your operating system.

Now first, we will need to infect the PDF file. To do this we need to open up Metasploit concole

Now that we're in the console you will want to type the following command.

PHP:
Please, Log in or Register to view codes content!

Once you've typed the following command you'll need to structure it out.
So you'll need to type.

PHP:
Please, Log in or Register to view codes content!

Now this gets to the interesting part, so listen up.
You will need to find the location of your pdf, so find that before you type the following command.

This is a example, of what I'm talking about.

PHP:
Please, Log in or Register to view codes content!

That is a example^^

So back onto the tutorial once you found your file directory just type it in metasploit.

PHP:
Please, Log in or Register to view codes content!

Now the next part you'll need the direct link to your full undetectable server (FUD)
so now type into metasploit

PHP:
Please, Log in or Register to view codes content!

Now that's it.
Now remember your infect file will be in the same directory as your PDF when you inserted it into Metasploit, so look there.

This worck only with older wersion of PDF
 
Paid adv. expire in 2 months
CLICK to buy Advertisement !
westernunion carding Verified & Trusted WesternUnion | MoneyGram | Bank - Transferring [299$ BTC for 2000$ WU]
electronics carding Verified & Trusted Electronics Carding, Carding iPhone, Samsung Carding, MacBook Carding, Laptops Carding
Top Bottom