Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As mentioned in the title I'm looking for a tool that puts on a webserver some .html or .php files filled with popular malware like java drive-bys or other browser exploit payloads? Maybe there is something like this in Metasploit or on BackTrack?

share|improve this question

closed as off-topic by RoraΖ, Bob Brown, Mark, Jens Erat, Terry Chia Jan 26 '15 at 14:26

This question appears to be off-topic. The users who voted to close gave these specific reasons:

  • "Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – RoraΖ, Jens Erat, Terry Chia
  • "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Bob Brown, Mark
If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 4 down vote accepted

The Social Engineer Toolkit (SET) has something like what you ask for.

It allows you to create websites with various attack vectors.

Check out the 'Tactical Nuke' option for a widespread test.

This is found on Backtrack and integrates with Metasploit.

share|improve this answer
that seems to be what I was looking for..thanks a lot! – JohnnyFromBF Jan 19 '12 at 21:34
do you know SET or metasploit payloads that work without user interaction? – JohnnyFromBF Apr 7 '12 at 16:59
without user interaction, then it wouldn't be 'social' :) Metasploit has many tools to hack a computer without interaction. – schroeder Apr 7 '12 at 17:18
that's true somehow ;) could you name a few? i'm not very much into metasploit, just want to try it out myself on a VM. – JohnnyFromBF Apr 9 '12 at 13:13
you are looking for 'autopwn' on – schroeder Apr 9 '12 at 15:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.