Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Run an .exe that is encoded in a jpeg image (Windows)

I have an image with an .exe inside, my goal is to achieve that when the image is opened or a rar is decompressed (Any action) the executable starts.
Vulnerabilities that allow you to run payloads upon opening an image file are few and far between. Maybe you'll find an answer, but you'll most likely have to find a different route to deploy your payload. You could try using a .LNK shortcut to download a payload? You could disguise it as an image but people might still realize.
Signal: DelfinHF.69

[Image: banner-2.png]
(Sep 11, 2024 06:11 AM)Delfin Wrote:  Vulnerabilities that allow you to run payloads upon opening an image file are few and far between. Maybe you'll find an answer, but you'll most likely have to find a different route to deploy your payload. You could try using a .LNK shortcut to download a payload? You could disguise it as an image but people might still realize.

From what I've been able to read on the forum looking for information on the subject, infecting through an image is not a good idea, the tricks used are not very subtle. It's better to look for another way.
(Sep 11, 2024 06:21 AM)HCauldfield Wrote:  From what I've been able to read on the forum looking for information on the subject, infecting through an image is not a good idea, the tricks used are not very subtle. It's better to look for another way.

Yeah, there's definitely better ways. You could use malicious excel macros, malicious .MSI installer files, malicious batch scripts, etc. Depends entirely on your targets really
Signal: DelfinHF.69

[Image: banner-2.png]
(Sep 11, 2024 06:30 AM)Delfin Wrote:  Yeah, there's definitely better ways. You could use malicious excel macros, malicious .MSI installer files, malicious batch scripts, etc. Depends entirely on your targets really

Please bro ... Macro is not a good idea now because of the mark of the web. Macro is dead.
(Sep 11, 2024 07:25 AM)YolidPop Wrote:  Please bro ... Macro is not a good idea now because of the mark of the web. Macro is dead.

Loads of other options, and still a better method than trying to use images to deploy payloads lmao
Signal: DelfinHF.69

[Image: banner-2.png]
(Sep 11, 2024 07:25 AM)YolidPop Wrote:  Please bro ... Macro is not a good idea now because of the mark of the web. Macro is dead.

It's not a good idea because macros are disabled in any version of Office updated within the last several years.


(Sep 11, 2024 06:04 AM)HCauldfield Wrote:  I have an image with an .exe inside, my goal is to achieve that when the image is opened or a rar is decompressed (Any action) the executable starts.

If you somehow stuffed an exe into an image, the image would be invalid. There's the WebP exploit that you could try to execute code (no PoC). Using a WinRAR SFX archive with a custom icon and an image can look fairly convincing. You could also try this WinRAR exploit. It uses crafted ZIP files in WinRAR , but good luck.
U used a crypter?
(Sep 11, 2024 06:04 AM)HCauldfield Wrote:  I have an image with an .exe inside, my goal is to achieve that when the image is opened or a rar is decompressed (Any action) the executable starts.
(Sep 14, 2024 02:14 AM)Ghandi090909 Wrote:  U used a crypter?

Totally missing the point here.
When you do some searching about the posibility of the jpg+exe success everything you will find would have the .sfx/.rar or server.jpg.exe (hiding extensions).
Still the real extension will be shown,and therefore make it harder for evasion/suspicion.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Dr.DisconectSep 20, 2025 05:22 PM 35 2,404 Sep 20, 2025 05:22 PM
Last Post: Harry
by greghoglund1204Dec 18, 2019 06:37 PM 6 186 Dec 18, 2019 06:37 PM
Last Post: greghoglund1204
by ๖ۣۜCriminalDec 17, 2019 11:32 PM 11 610 Dec 17, 2019 11:32 PM
Last Post: greghoglund1204