DNS spoof adobe flash player,binded meterpreter

[pentest09]

Here we show how to dns_spoof website requests, creating a fake webpage, a binded backdoor with a vbs script and capture a victims keystrokes.

1#
We create our meterpreter reverse_tcp payload and then bind it to a
legitimate installer for use on our fake update webpage.
(all website requests for chosen sites will be redirected to the attacker)

2#
Once the victim runs the installer the vbs script then runs the backdoor.

3#
We then install the backdoor permanently to run upon bootup and connect back to the attacker at timed intervals.

#Finally we capture the victims keystrokes.

unfortunately blips conversion gives bad quality so if allowed heres my utube channel.
http://blip.tv/file/4498623 (dns_spoof_adobe_flash player)
http://blip.tv/file/4498704 (dns_spoof_login_credentials)
kind regards Dee

[joker5bb]

oh i saw fakeap_pwn folder there, lol
good work with the .exe file, but we can do better ways of getting them to download that file.

[pentest09]

Lol thanks joker5bb,
loving fakeap_pwn (g0tmilk) keep it up fellaz. enlighten us on some easier ways please with the download of the exe i know you work on that stuff.

Kind regards Dee

[joker5bb]

you can replace all the flash content on web pages with an image saying you need to update your flash player

this option would be in our framework, working on multi-client support right now.