[CactusRainbow12]

Hello,
I was wondering if there is any way to hide an .exe file in a .txt or .jpg today, there is a way to do that? how?
Thank you in advance.

[Shadow_Cloud]

Hello,
I was wondering if there is any way to hide an .exe file in a .txt or .jpg today, there is a way to do that? how?
Thank you in advance.

There are quite a few ways to do this, but it won't be executable when its stashed/hidden inside a different format. Can you explain the use case you are trying to get to work? I remember quite a wave of viruses using hidden shellcode inside celebrity images, if this is purely about distribution then yes, if you are talking about having a jpg execute dynamically then no.

[CactusRainbow12]

There are quite a few ways to do this, but it won't be executable when its stashed/hidden inside a different format.  Can you explain the use case you are trying to get to work?  I remember quite a wave of viruses using hidden shellcode inside celebrity images, if this is purely about distribution then yes, if you are talking about having a jpg execute dynamically then no.

Hello shadow_cloud and thank you for your respond, the use case is to send a .jpg/.txt file via mail with a payload inside it, so when the user download and opens theme, the program starts.
By the way this is only for learning, nothing else.
and sorry for my bad english🤣

[Shadow_Cloud]

Hello shadow_cloud and thank you for your respond, the use case is to send a .jpg/.txt file via mail with a payload inside it, so when the user download and opens theme, the program starts.
By the way this is only for learning, nothing else.
and sorry for my bad english🤣

Yeah this isn't a thing, if you want to understand how this works, do some intro to programming course (there are plenty of free ones online). If you understand how they work from the perspective of making them, you'll understand why this doesn't fit into the operating paradigm of most operating systems. There might be some OS that has an exception for this, but none that I am aware of.

You could use some tricks to embed info inside files, but that's not the same as having executable files.

[Pescado]

There are quite a few ways to do this, but it won't be executable when its stashed/hidden inside a different format.  Can you explain the use case you are trying to get to work?  I remember quite a wave of viruses using hidden shellcode inside celebrity images, if this is purely about distribution then yes, if you are talking about having a jpg execute dynamically then no.

would it be easier to do this with a pdf? I remember reading about being able to embed some javascript into a PDF somewhere.

[CactusRainbow12]

Yeah this isn't a thing, if you want to understand how this works, do some intro to programming course (there are plenty of free ones online).  If you understand how they work from the perspective of making them, you'll understand why this doesn't fit into the operating paradigm of most operating systems.  There might be some OS that has an exception for this, but none that I am aware of. 

You could use some tricks to embed info inside files, but that's not the same as having executable files.

but mydoom spread that way, no?

[Shadow_Cloud]

but mydoom spread that way, no?

That was executable files as an email attachment

"MyDoom.a spread via attached files with the extensions .bat, .cmd, .exe, .pif, .scr or .zip"

Yes, you could do this via some js in PDF files before, but all the techniques I knew about doing this is no longer available in the latest version. There might still be exploits for that available somewhere.

[grady]

the use case is to send a .jpg/.txt file via mail with a payload inside it, so when the user download and opens theme, the program starts.

The only realistic way for this to be done is to find some vulnerability within the software that is being used to open the file itself. You can't really attack with a file-type itself, because it has no "logic" and isn't really executed. Behind the scenes, the data for the image is being loaded and displayed by the program handling that file-type (i.e. whatever Windows' default is).