Hands-On Red Team Tactics

Payload generation – Java signed applet

A Java signed applet attack is a very famous drive-by attack used by the attacker to exploit the applets loaded on a web page. The Java applets are self-signed, and they can be used to get permission from the visitor (victim) for execution. Click on the button shown in the following screenshot for payload generation:

Once the visitor allows the applet to be executed, the payload will be executed and the beacon will be calling back to the team server.

You can also change the applet settings, including the Local URI, the Local Host, and Local Port (you can also give the redirector's information here), ...