[Wake]

Hide a Payload or any executable in a shortcut folder.

Written by Wake

Introduction

In this tutorial i will be covering how to hide a payload or any .exe in a shortcut folder. This means that when your USB is plugged in they would attempt to browse the flash drive like any average user and they are only a click away from being infected.

What is the point of me doing this?

The whole point to this is that even the less experienced user will possibly know not to go around opening any random executable files found on flash drives. The victim will plug in a seemingly harmless flash drive wondering what is on it. Upon opening the drive they will see a single file that look's like a folder without thinking twice the victim will double click on the folder instead of opening up a folder up opens a file or any executable you have set it to open.


How do i do this?
 
The first part to this is to find any old USB drive that you don't mind possibly not getting back and backing up any important files on it. If you don't want to risk losing your USB stick or having to get it back from your target i recommend you order a couple of cheap USB flash drives.

[+] On your flash drive create a new folder and give it any name. Now right click the folder click properties and select hidden and click ok. Spoiler (Click to View)

[+] Now if you can't see the folder you just created click view and click "Hidden items" Spoiler (Click to View)

[+] Now place your payload or executable into the folder we just created. It will look like this Your Drive > The hidden file we created > Your payload. For this example i am just using a simple .bat file made in notepad. Spoiler (Click to View)

[+] Now that your payload is inside the folder you just created go ahead and go back to your USB drive and create a shortcut with a good enticing name. Right click new and click shortcut for the location of the item browse and select your payload and click next now give that shortcut an enticing name that will make your victim want to click on it. Spoiler (Click to View)

[+] So now we have our hidden folder with our payload inside and the new shortcut we just made with an enticing name to hopefully encourage our victim to click on it. At the moment you will notice the shortcut we just made is not very hidden so let's fix that. Right click the shortcut and click properties now click change icon and select the icon that looks like a regular folder and click ok. Spoiler (Click to View)

[+] So now we see what our victim will see when they plug in the flash drive and begin to browse it. So lets go ahead and click on the shortcut that we just disguised as a folder and watch are payload/executable open. Spoiler (Click to View)

[+] If you successfully follow these steps you will have hidden your payload/executable in a shortcut that looks like a folder tricking your victim into clicking what they think is just a folder while they are browsing but they will actually end up running your payload/executable.

Can this be achieved with any USB Flash Drive?

Every USB Flash Drive i have tried this with has worked so i would assume so though i can't be certain. If you do find any USB Flash Drives this does not work with please post here or message me and i can update them on this thread so people who want to try this know if there USB Flash Drive will work or not.

Should i use a pre-owned USB Flash Drive for this attack?

I would not you will possibly lose one of your USB Flash Drives it is not a good idea to waste $5-10 per attack. If you attempted to get your USB Flash Drive back from your target, you are putting your anonymity at risk and the chance of you getting caught is high.

So, what should I do if I want to perform this attack "for educational purposes"?

Since this attack does not require a lot of space on the USB Flash Drive i would recommend ordering a couple of cheap USB Flash Drives. That way you are not at much loss if you lose them. I can provide links to cheap USB Flash Drives if needed just post asking or message me.

Thank you for taking the time to reading this thread.

[ᴇccy]

Nice one lad I hacked little T with this

[divino2017]

this one is a nice method which is most of the virus if found on my flash drive does it too but using some vbscript/jscript execution.

[uzi420]

Lol this is sick man thanks for the share, did this before.

[Haseo™]

Nicely put together and informative nicely done wake ^_^

[Wake]

Nicely put together and informative nicely done wake ^_^

Appreciate it thank you.