Dridex Hackers Zone
الذهاب إلى القناة على Telegram
854
المشتركون
لا توجد بيانات24 ساعات
لا توجد بيانات7 أيام
لا توجد بيانات30 أيام
أرشيف المشاركات
a loader is sent to your victim and it downloads the virus and runs the virus silently
This exploit allows to execute a shellcode in the context of the rendering process of Adobe Acrobat Reader DC 2020.013.20074 and earlier versions on Windows 10. Note: the shellcode used in this example pops a calc. For it to work you must disable Adobe Reader's sandbox or you can replace it with other shellcode.
The dreded Wannabe PDF EXPLOIT lol. Not that great uses shell codes. But here is the github
If you guys havent noticed i am posting different methods on how to spread your virus
Once you click "Enable" and "Enable Macros", the VBA script will be executed as below:
Once you complete all the steps above, you are now ready to execute the "demo.xlsx" file. Upon execution, you will see two warning messages:
You can now save your "test.xls" and host it on a web server (e.g., 192.168.21.132 in my case).
On the other hand, let's prepare a VBA-friendly Excel file in XLS format called "test.xls" and insert the following VBA callback procedure (with reference to Microsoft document) to satisfy the parameter requirements for the "onLoad" function stated in the above XML.
