1
Other / Re: Prank app - Question
« on: February 09, 2011, 02:05:44 am »
This sounds like one of those things that works best on a drunk friend.
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
A tool used in combination with MitM or TCP hijack/spoofing. The MitM/TCP-attack replaces HTTP requests for EXEs with links to a different host. The replacement request would be something like www.attacker.com/file.php=www.site.com/real_file.exe (or an IP rather than a domain for the attacker if you use the MitM computer to host).you could just use ettercap in combination with set or metasploit if they are on your LAN
The attacker.com essentially downloads, infects the executable, and forwards it. Downloading the entire file and then finally sending would take too long and the victim would probably time out. Instead, the attacker program downloads the file and infects as it's forwarding it to the victim. Attacker program would take the filesize of original EXE and determine what the size of the infect file will be and forward that size so that download can continue without a "size mismatch" error on the side of the victim.
I'm not sure what infection methods would work with pre-determined size. I suppose a binder would have a consistent size since there's no manipulation of the original file.
Multiple download parts wouldn't work on the size of the victim.