Thanks to a technique called Stegosploit, a hacker can infect your system by simply making you load an image on the Internet. You don’t even have to click or download the image.
What is Stegosploit?
Stegosploit is a technique developed by Security researcher Saumil Shah. The researcher presented it at Hack in the Box Conference recently held in Amsterdam. Using this technique, hackers can embed a malicious code inside the pixels [a pixel is a single point in a graphic image] of an image. And once a user loads this image on their browser, the malware will get downloaded automatically. Pictures that carry such codes do not look any different from other images. This technique works for both JPEG and PNG images.
So what does this mean?
It means that you may download a nasty virus on your system simply by viewing an image on your browser, without even clicking on it or downloading it.
Has Stegosploit been used in the wild?
There have been no reports which can evident the use of Stegosploit in the real world. But this does not mean that it won’t. It is also important to note that, using this technique, hackers can accomplish practically anything such as stealing the victim’s personal data, modifying files, opening a backdoor for other malware, etc.
and this toolkit?what does it do?
this toolkit lets you encode browser exploits in any picture you like by injecting it in the pixels of the image thus making it almost impossible to detect (you can t stop what you can t see)
the toolkit contains the following:
[img]http://s1.postimg.org/fo1u0zevz/capture2.png[/img]
[img]http://s7.postimg.org/d6rygm417/capture3.png[/img]
[img]http://s10.postimg.org/hkvaegcg9/capture6.png[/img]
[img]http://s13.postimg.org/d7o44oz5j/capture4.png[/img]
[img]http://s7.postimg.org/86ltu0u97/capture8.png[/img]
ps:
tutorial:
What is Stegosploit?
Stegosploit is a technique developed by Security researcher Saumil Shah. The researcher presented it at Hack in the Box Conference recently held in Amsterdam. Using this technique, hackers can embed a malicious code inside the pixels [a pixel is a single point in a graphic image] of an image. And once a user loads this image on their browser, the malware will get downloaded automatically. Pictures that carry such codes do not look any different from other images. This technique works for both JPEG and PNG images.
So what does this mean?
It means that you may download a nasty virus on your system simply by viewing an image on your browser, without even clicking on it or downloading it.
Has Stegosploit been used in the wild?
There have been no reports which can evident the use of Stegosploit in the real world. But this does not mean that it won’t. It is also important to note that, using this technique, hackers can accomplish practically anything such as stealing the victim’s personal data, modifying files, opening a backdoor for other malware, etc.
and this toolkit?what does it do?
this toolkit lets you encode browser exploits in any picture you like by injecting it in the pixels of the image thus making it almost impossible to detect (you can t stop what you can t see)
features:
- exploits hidden in pixels
- image "auto runs" upon load
- no visible distortion
- decoder code bundled with the image
- exploit automaticly decoded and triggered
- all with 1 image
the toolkit contains the following:
[img]http://s1.postimg.org/fo1u0zevz/capture2.png[/img]
[img]http://s7.postimg.org/d6rygm417/capture3.png[/img]
[img]http://s10.postimg.org/hkvaegcg9/capture6.png[/img]
[img]http://s13.postimg.org/d7o44oz5j/capture4.png[/img]
[img]http://s7.postimg.org/86ltu0u97/capture8.png[/img]
ps:
- read the README file FOR iNSTRUCTIONS
- works with meterpreter payloads
- use at ur own risks
tutorial:
![[Image: bgqe06s.png]](https://i.imgur.com/bgqe06s.png)
![[Image: De7wpim.gif]](https://i.imgur.com/De7wpim.gif)
![[Image: kHhbZuF.jpg]](https://i.imgur.com/kHhbZuF.jpg)
