Basically, I'm testing a local network, on which I'm able to use ARP spoofing. I now want to try and infect one of the Windows boxes on the network with a backdoor. I could inject an iframe into their HTTP traffic, or a JavaScript redirect, or something to that effect, to get the file to download. However, I'm wondering if there are other methods to do this - which wouldn't be so obvious to the end user and require quite so much interaction from him/her.

In other words, which tools would let me look for the next .exe file downloaded and replace the contents with my backdoor executable or any other vectors you can think of?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.