search

infobyte / evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.
https://www.faradaysec.com/
1.26k stars 278 forks source link

Help using notepadplus version 7 #41

Open ChillVibesMushroom opened 1 year ago

ChillVibesMushroom commented 1 year ago

I installed evil grade using sudo apt-get install evil grade

I created the payload using msfvenom a windows shell

I setup ettercap with the right url sourceforge and redirect to my IP

I dns spoof correctly with ettercap

I run nc -l -p 4444

I open notepadplus I don't get an update message so I run update and it says gup xml error

I'm new to this I know I'm missing something

How would I setup the proxy to allow updates in notepadplus 32 bit on my windows 11 laptop is that the issue

Can someone guide me or send me a useful video that shows me what to do I know I'm close to completion and execution I just need that extra push I will be grateful

ChillVibesMushroom commented 1 year ago

What's the easiest program to exploit on windows with evil grade if I can get that and the url needed in etter.dns I can do it and I'll work from there this is one of the final steps I need to complete my training