I have come across many people who don't believe in antivirus solutions and don't patch or update their OS and applications. "I never visit dodgy websites", "I only use the internet to read emails" "I am not stupid, I can distinguish between emails that are dodgy and which are not" ... you know what I mean.
I need to show them that they are vulnerable without causing them damage. Is there a way or a script I can use to show them exactly how naive they are? A script which would do a drive by download which would trigger a "you have been pwned" would do the job.