๖ۣۜYoung ๖ۣۜthug Posted May 16, 2016 Share Posted May 16, 2016 I have on mind about to creat a javascript and upload on my website so when someone visit me will do some tasks for me , is that possible ? Link to comment Share on other sites More sharing options...
GeneralKenody Posted May 17, 2016 Share Posted May 17, 2016 What do you mean? Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Share Posted May 17, 2016 What do you mean? creat a javascript that download and execute a file to desktop also i cant understand if it will work with browsers like chrome it says that javascript is blocked on most all browsers expect internet explorer Link to comment Share on other sites More sharing options...
GeneralKenody Posted May 17, 2016 Share Posted May 17, 2016 (edited) You can write a script that downloads the file (for example .exe program) and then the user can execute it himself. I think it is impossible to do it automatically by design, because it is dangerous (the file might be a virus). You can find more information here : http://stackoverflow.com/questions/3749231/download-file-using-javascript-jquery . By the way what do you mean Javascript is blocked in all browsers except IE? (If you know Greek you can write in Greek as well) Edited May 17, 2016 by Gregor Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Share Posted May 17, 2016 (edited) You can write a script that downloads the file (for example .exe program) and then the user can execute it himself. I think it is impossible to do it automatically by design, because it is dangerous (the file might be a virus). You can find more information here : http://stackoverflow.com/questions/3749231/download-file-using-javascript-jquery . i prefer all this be silence By the way what do you mean Javascript is blocked in all browsers except IE? (If you know Greek you can write in Greek as well) yes Edited May 17, 2016 by DarkLess* Link to comment Share on other sites More sharing options...
GeneralKenody Posted May 17, 2016 Share Posted May 17, 2016 I don't understand :P Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Share Posted May 17, 2016 (edited) I don't understand :P http://stackoverflow.com/questions/34238913/can-i-digitally-sign-jscript-js-or-vbscript-vbs-files how about disable security test ? @edit i wonder how i can execute the file when downloaded from browser , can this be done with javascript ? Edited May 17, 2016 by DarkLess* Link to comment Share on other sites More sharing options...
GeneralKenody Posted May 17, 2016 Share Posted May 17, 2016 You can not execute a file with javascript. Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 17, 2016 Author Share Posted May 17, 2016 (edited) You can not execute a file with javascript. if i know the location ? @edit example downloading to appdata and executing since i know the location and name of file ? Edited May 21, 2016 by DarkLess* Link to comment Share on other sites More sharing options...
Tessa Posted May 21, 2016 Share Posted May 21, 2016 if i know the location ? @edit example downloading to appdata and executing since i know the location and name of file ? All browsers have disabled this "feature" long time ago, because it's a security vulnerability. Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 21, 2016 Author Share Posted May 21, 2016 (edited) All browsers have disabled this "feature" long time ago, because it's a security vulnerability. CVE id ?? Edited May 21, 2016 by DarkLess* Link to comment Share on other sites More sharing options...
Tessa Posted May 21, 2016 Share Posted May 21, 2016 IE - https://msdn.microsoft.com/en-us/library/aa767731(v=vs.85).aspx Firefox - http://kb.mozillazine.org/Firefox_%3a_Issues_%3a_Links_to_Local_Pages_Don%27t_Work Opera - http://www.opera.com/bg/security/advisory/896 Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 21, 2016 Author Share Posted May 21, 2016 (edited) IE - https://msdn.microsoft.com/en-us/library/aa767731(v=vs.85).aspx Firefox - http://kb.mozillazine.org/Firefox_%3a_Issues_%3a_Links_to_Local_Pages_Don%27t_Work Opera - http://www.opera.com/bg/security/advisory/896 http://prntscr.com/b6lgw0 These links are for other Vulnerabilities I want to make my updater downloaded and executed when someone join my website Edited May 21, 2016 by DarkLess* Link to comment Share on other sites More sharing options...
Tessa Posted May 21, 2016 Share Posted May 21, 2016 http://prntscr.com/b6lgw0 These links are for other Vulnerabilities I want to make my updater downloaded and executed when someone join my website You can't touch the user's directories... even if the browser download the file, it can't be executed automatically. Link to comment Share on other sites More sharing options...
๖ۣۜYoung ๖ۣۜthug Posted May 21, 2016 Author Share Posted May 21, 2016 You can't touch the user's directories... even if the browser download the file, it can't be executed automatically. Well gregor told me that i can't do it with javascript , i think it can executed with vbs. Link to comment Share on other sites More sharing options...
Recommended Posts