[i0xIllusi0n]

serious i don't care about that now... it really doesn't matter if it still works or not.. i just wanna learn new things.. so if you can help me a little bit to understand how it works and what do i need to modify i will be grateful to you

a JDB is a Java-DriveBy. It uses Java to download and run a file in the background, without a user knowing. You want FUD ones so it won't be detected by AVs. When you do find a JDB, you upload the *.jar to your FTP directory, then in your index.html or whatever page you're on, you add the code that is given to you so when the users' browser runs the page HTML, it will call upon the JDB which then downloads the file.

In the script it gives you to add, you'll see where to put your download link. This is because the JDB downloads from that link, you don't ind it to anything, so you want a DIRECT link to your malware, so it downloads and executes correctly. Once ran, the iframe or whatever on your page (if any) will just show a white / gray screen, even after the Malware is ran. It never goes away since there's nothing to display.

But of course for this to work correctly, when the user goes to the page, they will be asked about a Java confirmation. They have to click yes on the confirmation for the JDB to download. Otherwise, it doesn't run. From what I hear, however, there are some private JDBs that run even though the user closes out or denies the confirmation. Good luck finding those, though.