๖ۣۜYoung ๖ۣۜthug Posted May 16, 2016 Posted May 16, 2016 I have on mind about to creat a javascript and upload on my website so when someone visit me will do some tasks for me , is that possible ?
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Posted May 17, 2016 What do you mean? creat a javascript that download and execute a file to desktop also i cant understand if it will work with browsers like chrome it says that javascript is blocked on most all browsers expect internet explorer
GeneralKenody Posted May 17, 2016 Posted May 17, 2016 (edited) You can write a script that downloads the file (for example .exe program) and then the user can execute it himself. I think it is impossible to do it automatically by design, because it is dangerous (the file might be a virus). You can find more information here : http://stackoverflow.com/questions/3749231/download-file-using-javascript-jquery . By the way what do you mean Javascript is blocked in all browsers except IE? (If you know Greek you can write in Greek as well) Edited May 17, 2016 by Gregor
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Posted May 17, 2016 (edited) You can write a script that downloads the file (for example .exe program) and then the user can execute it himself. I think it is impossible to do it automatically by design, because it is dangerous (the file might be a virus). You can find more information here : http://stackoverflow.com/questions/3749231/download-file-using-javascript-jquery . i prefer all this be silence By the way what do you mean Javascript is blocked in all browsers except IE? (If you know Greek you can write in Greek as well) yes Edited May 17, 2016 by DarkLess*
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Posted May 17, 2016 (edited) I don't understand :P http://stackoverflow.com/questions/34238913/can-i-digitally-sign-jscript-js-or-vbscript-vbs-files how about disable security test ? @edit i wonder how i can execute the file when downloaded from browser , can this be done with javascript ? Edited May 17, 2016 by DarkLess*
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Posted May 17, 2016 (edited) You can not execute a file with javascript. if i know the location ? @edit example downloading to appdata and executing since i know the location and name of file ? Edited May 21, 2016 by DarkLess*
Tessa Posted May 21, 2016 Posted May 21, 2016 if i know the location ? @edit example downloading to appdata and executing since i know the location and name of file ? All browsers have disabled this "feature" long time ago, because it's a security vulnerability.
๖ۣۜYoung ๖ۣۜthug Posted May 21, 2016 Author Posted May 21, 2016 (edited) All browsers have disabled this "feature" long time ago, because it's a security vulnerability. CVE id ?? Edited May 21, 2016 by DarkLess*
Tessa Posted May 21, 2016 Posted May 21, 2016 IE - https://msdn.microsoft.com/en-us/library/aa767731(v=vs.85).aspx Firefox - http://kb.mozillazine.org/Firefox_%3a_Issues_%3a_Links_to_Local_Pages_Don%27t_Work Opera - http://www.opera.com/bg/security/advisory/896
๖ۣۜYoung ๖ۣۜthug Posted May 21, 2016 Author Posted May 21, 2016 (edited) IE - https://msdn.microsoft.com/en-us/library/aa767731(v=vs.85).aspx Firefox - http://kb.mozillazine.org/Firefox_%3a_Issues_%3a_Links_to_Local_Pages_Don%27t_Work Opera - http://www.opera.com/bg/security/advisory/896 http://prntscr.com/b6lgw0 These links are for other Vulnerabilities I want to make my updater downloaded and executed when someone join my website Edited May 21, 2016 by DarkLess*
Tessa Posted May 21, 2016 Posted May 21, 2016 http://prntscr.com/b6lgw0 These links are for other Vulnerabilities I want to make my updater downloaded and executed when someone join my website You can't touch the user's directories... even if the browser download the file, it can't be executed automatically.
๖ۣۜYoung ๖ۣۜthug Posted May 21, 2016 Author Posted May 21, 2016 You can't touch the user's directories... even if the browser download the file, it can't be executed automatically. Well gregor told me that i can't do it with javascript , i think it can executed with vbs.
Recommended Posts