# Have a Mac? Have Java? **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [April 5, 2012, 8:57am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842 "2012-04-05T08:57:18Z")\ **Posts on this page:** 8\ **Page:** 2
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 7:36am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/21 "2012-08-27T07:36:44Z")
So not really… Pretty much in IE/Firefox the java applet will run and you will never know… Chrome will still prompt a security alert to run the applet ![http://cdn.ghacks.net/wp-content/uploads/2011/04/java-plug-in-550x417.jpg](http://cdn.ghacks.net/wp-content/uploads/2011/04/java-plug-in-550x417.jpg) They can obfuscate whatever payload and your AV won’t pick it up. This is bad because usually vendors issue a patch relatively quickly and this doesn’t have a patch yet so pretty much any box running java is vulnerable. ---
**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\ **Post date:** [August 27, 2012, 7:38am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/22 "2012-08-27T07:38:26Z")
In Metasplot. Hooray for “hackers” now using it. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 7:41am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/23 "2012-08-27T07:41:32Z")
> [@boxxa](#): > > In Metasplot. Hooray for “hackers” now using it. It actually being in the metasploit doesn’t mean much since all of the MSF payloads are detected by all major AV companies. If you understand how MSF works and have some level of skill you can modify the exploits and payloads to not be detected but that isn’t the majority of people. Metasploit stopped trying to avoid AV because everytime they changed something AV vendors would quickly evolve now they just let users do that which makes it harder. ---
**Author:** ![ProgRocker](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/progrocker/32/5434_2.png) [@ProgRocker](https://forums.speedlife.net/u/ProgRocker)\ **Post date:** [August 27, 2012, 7:47am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/24 "2012-08-27T07:47:48Z")
Oh…you’ve got the Norton toolbar…you’re all set 😛 j/k. So all they need is a clever social network scheme, redirect to a website, run the applet (Stealthly), check for vulnerability, download payload, run payload, do whatever…If I understand (which I probably don’t) the process correctly. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 7:48am UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/25 "2012-08-27T07:48:52Z")
So the real issue is legit sites getting hacked quietly and someone embedding an exploit like this or hacking 3rd party AD sites and doing the same. Obviously sending people spam with a malicious link is also an option. [http://www.cloudsafe365.com/blackhole-exploit-kit-explained-wordpress/](http://www.cloudsafe365.com/blackhole-exploit-kit-explained-wordpress/) [http://blogs.technet.com/b/security/archive/2012/07/19/the-rise-of-the-black-hole-exploit-kit-the-importance-of-keeping-all-software-up-to-date.aspx](http://blogs.technet.com/b/security/archive/2012/07/19/the-rise-of-the-black-hole-exploit-kit-the-importance-of-keeping-all-software-up-to-date.aspx) ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 1:06pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/26 "2012-08-27T13:06:06Z")
https://player.vimeo.com/video/48312392?app_id=122963 Here you go start hacking ---
**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\ **Post date:** [August 27, 2012, 1:27pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/27 "2012-08-27T13:27:25Z")
Ya it isn’t hard to trick most AV’s. MSF has some fun stuff in it. Here is a video if anyone is bored and some other stuff. [http://www.securitytube.net/video/2666](http://www.securitytube.net/video/2666) Whole MSF training [http://www.securitytube.net/groups?operation=view&groupId=10](http://www.securitytube.net/groups?operation=view&groupId=10) [http://www.offensive-security.com/metasploit-unleashed/](http://www.offensive-security.com/metasploit-unleashed/) When you get good here is the Meterperter script that you can have fun with but may be outdated. Had this one bookmarked a while ago while playing around with some stuff. [http://pastebin.com/fXF2jKwY](http://pastebin.com/fXF2jKwY) ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [August 27, 2012, 1:30pm UTC](https://forums.speedlife.net/t/have-a-mac-have-java/221842/28 "2012-08-27T13:30:50Z")
Microsoft Security Essentials picks up all the metasploit payloads(java, php, compiled c) You need to roll a custom payload it will stop exploits before you even get a chance to kill off AV. [Previous page](https://forums.speedlife.net/t/have-a-mac-have-java/221842.md?page=1)