I have an image with an .exe inside, my goal is to achieve that when the image is opened or a rar is decompressed (Any action) the executable starts.
Run an .exe that is encoded in a jpeg image (Windows) |
|
Vulnerabilities that allow you to run payloads upon opening an image file are few and far between. Maybe you'll find an answer, but you'll most likely have to find a different route to deploy your payload. You could try using a .LNK shortcut to download a payload? You could disguise it as an image but people might still realize.
(Sep 11, 2024 06:11 AM)Delfin Wrote: Vulnerabilities that allow you to run payloads upon opening an image file are few and far between. Maybe you'll find an answer, but you'll most likely have to find a different route to deploy your payload. You could try using a .LNK shortcut to download a payload? You could disguise it as an image but people might still realize. From what I've been able to read on the forum looking for information on the subject, infecting through an image is not a good idea, the tricks used are not very subtle. It's better to look for another way. (Sep 11, 2024 06:21 AM)HCauldfield Wrote: From what I've been able to read on the forum looking for information on the subject, infecting through an image is not a good idea, the tricks used are not very subtle. It's better to look for another way. Yeah, there's definitely better ways. You could use malicious excel macros, malicious .MSI installer files, malicious batch scripts, etc. Depends entirely on your targets really (Sep 11, 2024 06:30 AM)Delfin Wrote: Yeah, there's definitely better ways. You could use malicious excel macros, malicious .MSI installer files, malicious batch scripts, etc. Depends entirely on your targets really Please bro ... Macro is not a good idea now because of the mark of the web. Macro is dead. (Sep 11, 2024 07:25 AM)YolidPop Wrote: Please bro ... Macro is not a good idea now because of the mark of the web. Macro is dead. Loads of other options, and still a better method than trying to use images to deploy payloads lmao
Sep 12, 2024 03:54 AM
(This post was last modified: Sep 12, 2024 04:04 AM by DramaKing.)
(Sep 11, 2024 07:25 AM)YolidPop Wrote: Please bro ... Macro is not a good idea now because of the mark of the web. Macro is dead. It's not a good idea because macros are disabled in any version of Office updated within the last several years. (Sep 11, 2024 06:04 AM)HCauldfield Wrote: I have an image with an .exe inside, my goal is to achieve that when the image is opened or a rar is decompressed (Any action) the executable starts. If you somehow stuffed an exe into an image, the image would be invalid. There's the WebP exploit that you could try to execute code (no PoC). Using a WinRAR SFX archive with a custom icon and an image can look fairly convincing. You could also try this WinRAR exploit. It uses crafted ZIP files in WinRAR , but good luck.
U used a crypter?
(Sep 11, 2024 06:04 AM)HCauldfield Wrote: I have an image with an .exe inside, my goal is to achieve that when the image is opened or a rar is decompressed (Any action) the executable starts. (Sep 14, 2024 02:14 AM)Ghandi090909 Wrote: U used a crypter? Totally missing the point here. |
|
|



![[Image: banner-2.png]](https://i.ibb.co/R6VrXfG/banner-2.png)