FrankenScript by Slim76 - It Attacks Access Points and .pcap files

[mmusket33]

Again for clarity this is what we get - !!!Downloaders beware!!!

We are using XP for the download

For example:
We went to: http://rghost.net/51637035

There is a black rectangular square below the file name with the word Download. When you click on the square the program asks you to download FrankenScript-v2.tar.gz.

You click it and it shows you the correct file name and asks to run or save. You save the file !!!BUT!!! What you get is:

FrankenScript-v2.tar.gz-180upload_accelerator.exe(314KB)

We have already seen this on the original download link and do not wish to do through that again. ie the same csize file just a more embedded name. Here the stick the actual file name at the beginning but give you an exe file instead.

We picked this page for its simplicity. There are only one or two other download buttons on the far right of the page and they deal with Windows products.

Musket Team A/B

[mmusket33]

Okay further to our above comments.

Our lab has six computers. We tried two other computers running XP and in every case clicking on the file gave us an exe file. The name of the file changed with the site but in every case it was a small exe. You do not want to run this - see our original above. Next we thought to try the download with kali-linux


Using kali-linuix we downloaded the correct file named FrankenScript-v2.tar.gz.

So for most of these links shown for this file we suggest users not use XP for the download - you will end up with a load of spyware and bogus products.


MTA/MTB