# Have a Mac? Have Java? **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [April 5, 2012, 8:57am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842 "2012-04-05T08:57:18Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [April 5, 2012, 8:57am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/1 "2012-04-05T08:57:18Z")
UPDATE 8/27/2012 TURN THAT SHIT OFF [http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/](http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/) ---
**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\ **Post date:** [April 5, 2012, 9:01am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/2 "2012-04-05T09:01:43Z")
Have a PC? Press Alt + F4 for the new version of NYSpeed! ---
**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\ **Post date:** [April 5, 2012, 9:04am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/3 "2012-04-05T09:04:25Z")
kind of a dick move, no? ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [April 5, 2012, 9:06am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/4 "2012-04-05T09:06:54Z")
lol ---
**Author:** ![TradersBASE](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/tradersbase/32/5321_2.png) [@TradersBASE](https://forums.speedlife.net/u/TradersBASE)\ **Post date:** [April 5, 2012, 9:15am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/5 "2012-04-05T09:15:43Z")
Rick roll? I’m not clicking to find out, that’s for sure. LOL ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [April 5, 2012, 9:17am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/6 "2012-04-05T09:17:38Z")
Well I was running the java exploit with a do nothing payload…however I thought that might be mean. So I changed it to just a website no java lol ---
**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\ **Post date:** [April 5, 2012, 11:07am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/7 "2012-04-05T11:07:05Z")
Damn script kiddie. ---
**Author:** ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)\ **Post date:** [April 5, 2012, 11:15am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/8 "2012-04-05T11:15:55Z")
Is this because Joyner said you don’t write viruses? ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [April 5, 2012, 11:21am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/9 "2012-04-05T11:21:47Z")
lol ---
**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\ **Post date:** [April 5, 2012, 12:30pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/10 "2012-04-05T12:30:56Z")
pffftt, he didn’t write it. I saw LZ posting on twitter earlier today trying to acquire said code. lol ---
**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\ **Post date:** [April 5, 2012, 12:33pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/11 "2012-04-05T12:33:12Z")
what a slut…Apple just released a Java update today. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [April 5, 2012, 12:44pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/12 "2012-04-05T12:44:32Z")
> [@boardjnky4](#): > > pffftt, he didn’t write it. I saw LZ posting on twitter earlier today trying to acquire said code. > > lol What? I was looking for a malware sample for that one trojan to look at… The thing I was serving up was using metasploit with a custom payload lol ---
**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\ **Post date:** [April 5, 2012, 1:34pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/13 "2012-04-05T13:34:33Z")
oh come on, i was just joshin with ya Nice little job on that though. Pair that with a nice little phishing email or facebook link and you’ve got yourself some pwnage. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 7:11am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/14 "2012-08-27T07:11:21Z")
bump updated first post If you have a Mac or PC might be a good idea to disable Java 🙂 ---
**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\ **Post date:** [August 27, 2012, 7:19am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/15 "2012-08-27T07:19:24Z")
WTF does the exploit actually do? connects to an IP and downloads a payload? ---
**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\ **Post date:** [August 27, 2012, 7:24am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/16 "2012-08-27T07:24:27Z")
“The applet check if the system is running Windows and gets the parameters passed from the HTML that contains the URL to download the payload. If the system is vulnerable, the payload is downloaded and executed in the system.” ---
**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\ **Post date:** [August 27, 2012, 7:26am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/17 "2012-08-27T07:26:37Z")
How is that really any different from a majority of the other viruses. I mean Java does suck and leaves an easy gateway into the machine, but I feel like this happens quite frequently already. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 7:29am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/18 "2012-08-27T07:29:32Z")
Pretty much lets you execute whatever you want and doesn’t pop up that the applet is unsigned lol ---------- Post added at 10:29 AM ---------- Previous post was at 10:26 AM ---------- Looks like this if you know Java at all This just pops calc.exe [http://pastie.org/4594319](http://pastie.org/4594319) ---
**Author:** ![boardjnky4](https://avatars.discourse-cdn.com/v4/letter/b/96bed5/32.png) [@boardjnky4](https://forums.speedlife.net/u/boardjnky4)\ **Post date:** [August 27, 2012, 7:30am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/19 "2012-08-27T07:30:53Z")
> [@ProgRocker](#): > > How is that really any different from a majority of the other viruses. I mean Java does suck and leaves an easy gateway into the machine, but I feel like this happens quite frequently already. So just because lots of other vulns exist, you should ignore this one? I like to keep my shit secure. ---
**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\ **Post date:** [August 27, 2012, 7:33am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/20 "2012-08-27T07:33:35Z")
^Not at all, just doesn’t seem like it’s a new exploit. I’d assume malwarebytes (pro version) as well as some others should flag the IP it’s downloading from as malicious and block it. [Next page](https://forums.speedlife.net/t/have-a-mac-have-java/221842.md?page=2)