+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: "Stegosploit t00lkit V2 (Exploit Delivery via Steganography)" (/showthread.php?tid=4898460)
Pages: Pages
1
2
"Stegosploit t00lkit V2 (Exploit Delivery via Steganography)" - nezha240697 - Jul 8, 2015
Thanks to a technique called Stegosploit, a hacker can infect your system by simply making you load an image on the Internet. You don’t even have to click or download the image.
What is Stegosploit?
Stegosploit is a technique developed by Security researcher Saumil Shah. The researcher presented it at Hack in the Box Conference recently held in Amsterdam. Using this technique, hackers can embed a malicious code inside the pixels [a pixel is a single point in a graphic image] of an image. And once a user loads this image on their browser, the malware will get downloaded automatically. Pictures that carry such codes do not look any different from other images. This technique works for both JPEG and PNG images.
So what does this mean?
It means that you may download a nasty virus on your system simply by viewing an image on your browser, without even clicking on it or downloading it.
Has Stegosploit been used in the wild?
There have been no reports which can evident the use of Stegosploit in the real world. But this does not mean that it won’t. It is also important to note that, using this technique, hackers can accomplish practically anything such as stealing the victim’s personal data, modifying files, opening a backdoor for other malware, etc.
and this toolkit?what does it do?
this toolkit lets you encode browser exploits in any picture you like by injecting it in the pixels of the image thus making it almost impossible to detect (you can t stop what you can t see)
features:
- exploits hidden in pixels
- image "auto runs" upon load
- no visible distortion
- decoder code bundled with the image
- exploit automaticly decoded and triggered
- all with 1 image
the toolkit contains the following:
[img]http://s1.postimg.org/fo1u0zevz/capture2.png[/img]
[img]http://s7.postimg.org/d6rygm417/capture3.png[/img]
[img]http://s10.postimg.org/hkvaegcg9/capture6.png[/img]
[img]http://s13.postimg.org/d7o44oz5j/capture4.png[/img]
[img]http://s7.postimg.org/86ltu0u97/capture8.png[/img]
ps:
- read the README file FOR iNSTRUCTIONS
- works with meterpreter payloads
- use at ur own risks
tutorial:
* - Armada - Jul 8, 2015
VERY interesting product.
Would you be interested in offering a vouch copy so I can review for you?
* - morph - Jul 8, 2015
If you could provide me with a copy I'll write a highly detailed review for you.
* - Vеrt - Jul 11, 2015
Wow, that's crazy. I'm never opening pics again.
* - lxcalghxst - Jul 11, 2015
Very nice... Will buy this soon
* - spidum - Jul 11, 2015
Wow I saw this years ago watching blackhat. I never thought I would ever have the opportunity to buy it haha. This shit is dangerous.
* - daymon - Jul 11, 2015
Stegosploit is an obfuscation technique to hide an exploit within images, its not actually an exploit.
* - xchg - Jul 11, 2015
(Jul 8, 2015 09:35 AM)ȺʁɱªÐą Wrote: VERY interesting product.
Would you be interested in offering a vouch copy so I can review for you?
I agree this is a very interesting product presentation.
Forgive me, but I'm a bit skeptical.
(Jul 11, 2015 10:07 PM)Sin Wrote: Stegosploit is an obfuscation technique to hide an exploit within images, its not actually an exploit.
Thank you for clearing this up
🤝
* - nezha240697 - Jul 12, 2015
hey guys i understand your doubts that s why an awesome HF member is working on an honnest review have à Nice day
* - indicud - Jul 23, 2015
Does this work OP? I really want to purchase this...
* - Fresh Money - Jul 23, 2015
Looks great, let me know if you still seek to give out some vouch copies, I will be more than happy to review this one for yu.
* - jarvis1 - Feb 9, 2016
Hi i know this thread is a bit old but i would like to know if this method is still working on browsers like chrome, firefox or safari.
Plus, i've read that you can also use your own exploit, i just want to know if i generate a python backdoor with veil evasion can i copy and paste the whole source code directly into this stegosploit toolkit or should i write a special "ad hoc" code?
Thanks :)
* - inferno.c - Feb 9, 2016
LOL! You are selling a free exploit and it's SUPER OLD
* - n3tw0rksyst2m - Feb 9, 2016
it's fake.
I buy it yesterday
but it's not work.
it can't encoding
I have a question.
then, what is new exploit toolkit?
answer to me. thanks :)
* - didonadezuk - Apr 27, 2016
It's nice
Ready to take ,
Contact me soon
Thank's