Embed Malicious URL in Popular Websites

Embed Malicious URL in Popular website

5 June 2020 Ethical Hacking / Exploiting Tools

Hey Folks, in this tutorial we will show you that how you can embed your malicious URL in popular websites such as : Youtube, Facebook and Google etc. These kind of techniques are useful during the social engineering attacks because we can embed our malicious URLs in well known domains and send to the victim.

Reuirements

Kali Linux = Attacker

Lets take a look !!

URLCADIZ TOOL

It is open source tool that is hosted on github page. This allow an attacker to embed his malicious code or URL in well known domains. To do our work, we have to download it from the github page.

1
git clone https://github.com/PerezMascato/URLCADIZ.git

Install the requirements using the pip command and go to the directory of this tool.

1
2
3
sudo pip3 install pyshorteners
cd URLCADIZ
python3 URLCADIZ.py

It provide us various features as you can see below. For an example we will select the option second.

Here we will paste the original URL of youtube in the first section and our malicious URL in the post link section.

Finalize URL has come before us. Now we can sent this URL to the victim.

You can see that the URL has been successfully redirected to our website.

Manual Method

Now we can embed the URL automatically. The usage guide is given below.
Usage < orignal URL > < any keywork > @< malicious URL >

1
https://google.com-smb-server-can-be-hacked@secnhack.in

As soon we will click on ‘Yes’ button the URL will be redirected on malicious website.

Great !! Similarly we can add phishing page and take the advantage of this technique.

Comments

RouterSploit ..(Exploitation Framework for Embedded Devices)

RouterSploit - Exploitation Framework for Embedded Devices The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. click here to video It consists of various modules that aids penetration testing operations: exploits - modules that take advantage of identified vulnerabilities creds - modules designed to test credentials against network services scanners - modules that check if a target is vulnerable to any exploit payloads - modules that are responsible for generating payloads for various architectures and injection points generic - modules that perform generic attacks Installation Requirements Required: future requests paramiko pysnmp pycrypto Optional: bluepy - bluetooth low energy Installation on Kali Linux apt-get install python3-pip git clone https://www.github.com/threat9/routersploit cd routersploit python3 -m pip install -r requirements.txt python3 rsf.py Bluetooth Low Energy suppo...

Embed Payload (Exe) into a PDF Documents – EvilPDF

Hey folks, today we are going to talk about the tool that can easily add malicious payloads within the .PDF extension files and after which you can easily access any system. As we know it is prohibited to execute malicious payloads inside the window defender system, hence we will send our payload through the PDF files. Environment Kali Linux = Attacker Window 10 = Victim ( Tested On ) Lets take a look 🙂 !! EvilPDF The EvilPDF tool is specifically designed to embed payloads inside PDF files. It is an open source tool hosted on the github page that we will download using the wget command. git clone https://github.com/thelinuxchoice/evilpdf cd evilpdf 1 2 git clone https://github.com/thelinuxchoice/evilpdf cd evilpdf It require some additional features that we can download using the following command. python -m pip install pypdf2 1 python -m pip install pypdf2 Now we can use this tool using the given command. python evilpdf.py 1 python evilpdf.py In the image below you have t...

TheFatRat ( make a bypass antivirus create payload )

TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus. Features ! Fully Automating MSFvenom & Metasploit. Local or remote listener Generation. Easily Make Backdoor by category Operating System. Generate payloads in Various formats. Bypass anti-virus backdoors. File pumper that you can use for increasing the size of your files. The ability to detect external IP & Interface address . Automatically creates AutoRun files for USB / CDROM exploitation Installation Instructions on how to install TheFatRat git clone https://github.com/Screetsec/TheFatRat.git cd TheFatRat chmod +x setup.sh && ./setup.sh Update cd TheFatRat ./update && c...

Byforce

Search This Blog