[portraitrugs]

I know that you can bind a payload such as a windows rat to run when whatever it is binded to (lets just say a jpg file) is opened, but lets just say the attacker doesn't know what device the file will be opened on, can the attacker bind 3 payloads with the 1 jpg file. For example, can they bind an iphone rat, android rat and windows rat together with the 1 jpg file. Then when a user opens that jpg file all 3 rats will run but obviously only the correct rat will install depending on the device

[DramaKing]

I know that you can bind a payload such as a windows rat to run when whatever it is binded to (lets just say a jpg file) is opened, but lets just say the attacker doesn't know what device the file will be opened on, can the attacker bind 3 payloads with the 1 jpg file. For example, can they bind an iphone rat, android rat and windows rat together with the 1 jpg file. Then when a user opens that jpg file all 3 rats will run but obviously only the correct rat will install depending on the device

There are binders. There are no jpg binders. It's difficult to prove a negative, I know, but whatever application gets used to open what the OS believes to be a JPG must be able to run the executable code without throwing an error. Yeah, if only.

-------

OMG, I admit to being a sad sack when it comes to programming, but I thought that it was generally understood that you cannot have one file with code for multiple platforms AND architectures. An Android device would fail to run C++ or C# code compiled for Windows. It won't just open an image, look for only the Android code, and run it. A Windows machine similarly would fail to run any executable containing ARM Java or Kotlin code. An iPhone would just refuse to run any code not part of the system or an app.

When using exploits, you have to target your victim very specifically or just accept a percentage. Binding a bunch of exploits together is just not an option and compunds your chances of detection. Your only real option is to send a download link to a page that serves a file based on the client's user agent like many software developers use on their websites.

[Delfin]

DramaKing is completely right. You can't really make a single payload that will run on Windows, iOS and Android. They each have different formats. Additionally, you can't really make a program run when a JPEG is opened, and definitely not universally.

The closest thing to what you want is xBinder, which allows you to combine a Mac binary and a Windows binary into a singular JAR file. Aside from that, nothing else exists publicly as far as I'm aware

[DramaKing]

Come to think of it, Python scripts will run on any platform, more or less. Technically, Java will run on anything, too, but I'm not sure if it's possible to simply run a .jar on Android.

[Delfin]

Come to think of it, Python scripts will run on any platform, more or less. Technically, Java will run on anything, too, but I'm not sure if it's possible to simply run a .jar on Android.

There's applications you can download to execute .JAR files, but you can't do it natively without any other apps installed

[Ivanov_1]

I am no expert but in my opinion an iphone needs to be jailbroken to install the rat.
There is one rat (888 i think) that is for multi os ( androis/linux/windows) but doe not offer a build for iphone.
Just my 2 cents guys.