+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: steganography, embed exe in pixels of an image (/showthread.php?tid=5855657)
steganography, embed exe in pixels of an image - donotask - Jun 29, 2018
anybody here know about stegosploit? i discoverd it talking to a irl friend that uses this to spread.
its the process of embedding an exe in pixeles of a jpeg or png image, it is used for spreading. victim opens image and exe is downloaded and executed.
also it can be a url where the victims visits and just opens the web page and gets infectes, cybersecurity blogs talk about embedding exe s in ads through stegosploit.
im interested in knowing more about this.
also my irl friend talked to me about rootkits, he spreads those with stegosploit, he says its almost impossible to remove because it goes "between the bios and the os". he says with a rootkit you have access to the whole computer. if its like this, why arent rootkist used to spread? could someone steal bots from sellers if he installs rootkits on every bot he buys? every time the stub gets detected/botkilled he would still have access to the pc with the rootkit? or am i missing somehting?
RE: steganography, embed exe in pixels of an image - Condescend - Jun 29, 2018
Visit a website and automatically download, run, and get infected? Yeah... I don't think so.
Unless you're running on an earlier version of Windows, getting applications to autorun without the user invoking it isn't possible, as far as I know. If this were possible, every single fake website with auto-downloads would take advantage of it.
Rootkits can be placed in multiple places of the OS. It depends on the technique of the creator. They can be detected, but it can be pretty weird detecting them. They are also much more difficult to create, due to them being so much more advanced than other malware; and, most of the time, they take advantage of system vulnerabilities to gain more administrative access, so that makes them even harder to construct.
RE: steganography, embed exe in pixels of an image - donotask - Jun 29, 2018
(Jun 29, 2018 08:14 AM)Condescend Wrote: Visit a website and automatically download, run, and get infected? Yeah... I don't think so.
Unless you're running on an earlier version of Windows, getting applications to autorun without the user invoking it isn't possible, as far as I know. If this were possible, every single fake website with auto-downloads would take advantage of it.
Rootkits can be placed in multiple places of the OS. It depends on the technique of the creator. They can be detected, but it can be pretty weird detecting them. They are also much more difficult to create, due to them being so much more advanced than other malware; and, most of the time, they take advantage of system vulnerabilities to gain more administrative access, so that makes them even harder to construct.
but could a rootkit download and execute a exe on a pc?
also check here about stegosploit and malvertising: htt p s : / / theha ckernews.com/ 2016/ 12/ima ge- exp loit-hac king .htm l is this possible?
RE: steganography, embed exe in pixels of an image - Condescend - Jun 29, 2018
(Jun 29, 2018 10:03 AM)donotask Wrote: but could a rootkit download and execute a exe on a pc?
also check here about stegosploit and malvertising: htt p s : / / theha ckernews.com/ 2016/ 12/ima ge- exp loit-hac king .htm l is this possible?
A rootkit usually has full administrative privileges, so yes; it could run an application at its will. I've never heard of malvertising.
RE: steganography, embed exe in pixels of an image - Boolean type - Jun 29, 2018
OP you are missing common sense also your friend is an idiot or retarded skid. Sorry i had to say that.
honestly never seen more bullshit in one thread.
RE: steganography, embed exe in pixels of an image - donotask - Jun 29, 2018
(Jun 29, 2018 10:10 AM)Boolean type Wrote: OP you are missing common sense also your friend is an idiot or retarded skid. Sorry i had to say that.
honestly never seen more bullshit in one thread.
ok, but why?
RE: steganography, embed exe in pixels of an image - Clarence - Jun 29, 2018
(Jun 29, 2018 08:14 AM)Condescend Wrote: Visit a website and automatically download, run, and get infected? Yeah... I don't think so.
Isn't that like the way an exploit kit works though? I may be wrong
RE: steganography, embed exe in pixels of an image - Justanotheralias - Jun 29, 2018
(Jun 29, 2018 10:10 AM)Boolean type Wrote: OP you are missing common sense also your friend is an idiot or retarded skid. Sorry i had to say that.
honestly never seen more bullshit in one thread.
Thank you, I saved 2 minutes typing that.
RE: steganography, embed exe in pixels of an image - Condescend - Jun 29, 2018
(Jun 29, 2018 11:17 AM)Clarence Wrote: Isn't that like the way an exploit kit works though? I may be wrong
Exploit kits take advantage of vulnerabilities in browsers, and the system and its applications in of itself. Years ago, autorunning downloaded executables was much more common, due to these kits, but due to them being so difficult to create, and the frequency of patches of software, they are not nearly as common.
That's why I said "unless you are running on an earlier version of Windows," because less updated machines are more vulnerable to exploits.
RE: steganography, embed exe in pixels of an image - inyourmemory - Jun 29, 2018
(Jun 29, 2018 02:57 PM)Condescend Wrote: Exploit kits take advantage of vulnerabilities in browsers, and the system and its applications in of itself. Years ago, autorunning downloaded executables was much more common, due to these kits, but due to them being so difficult to create, and the frequency of patches of software, they are not nearly as common.
That's why I said "unless you are running on an earlier version of Windows," because less updated machines are more vulnerable to exploits.
EKs are the main infection vector (not the RIG shits)