
11.04.2018, 14:03
|
|
Участник форума
Регистрация: 30.01.2018
Сообщений: 180
С нами:
4360567
Репутация:
0
|
|
FakeImageExploiter v1.3 - backdoor images.jpg[.ps1]
This module takes one existing image.jpg and one payload.ps1 (input by user) and
builds a new payload (agent.jpg.exe) that if executed it will trigger the download of
the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them.
This module also changes the agent.exe Icon to match one file.jpg Then uses the spoof
'Hide extensions for known file types' method to hidde the agent.exe extension.
All payloads (user input) will be downloaded from our apache2 webserver
and executed into target RAM. The only extension (payload input by user)
that requires to write payload to disk are .exe binaries.
link: r00t-3xp10it/FakeImageExploiter
|
|
|