Thomas Werth Java Applet Open-Sourced

This blog post releases source code for a malicious Java applet proof-of-concept used with the Social-Engineer Toolkit: it detects the victim OS, downloads a platform-specific payload to a temp folder, launches the payload (e.g., via cmd.exe on Windows), and then deletes the file, relying on user acceptance of a signed applet to compromise fully patched Windows, Linux, and macOS systems.