- This topic has 7 replies, 2 voices, and was last updated 3 years, 10 months ago by .
- You must be logged in to reply to this topic.
Hey all, I’ve used a Right-to-Left-Override on a file in Kali and successfully changed the name from a .bat to look like a .jpg but when my target downloads the file from my apache2 server it shows on my windows machine as a .bat file still?
Hi!
Can you try to zip the file first? The download and uncompres it in your victim’s machine.
Let me know how it goes!
Diego
when extracting the file it shows a folder as _gpj for some reason. The file its self does show as a .jpg once its all extracted though so that does help thanks.
Hi!
Can you share a screenshot of what are you compressing in kali?
Also the result in windows please.
Thanks!
Diego
I’m compressing this and here is the output shown to the Windows machine:
Hi Tcale!
As I can see the file in windows shows a proper spoofed extension.
The othe issues are because you left the right-to-left character when compressing the file, to avoid this just clear the suggested name by the compressing tool and write a new one.
Hope it helps!
Diego
Il give it a try awesome thanks
Hi!
Let me know how it goes!
Diego
Not a member yet? Register now
Are you a member? Login now
All of our courses include:
✔ Lifetime, unlimited access to course materials & training videos.
✔ Verifiable certificate of completion from zSecurity, signed by the course instructor, Zaid.
✔ Get answers from our Support Team within a maximum of 15 hours.
✔ Unlimited Updates.
Get free 1 month VIP membership per course with:
✔ Live mentorship and Q&A session with the course instructor, Zaid.
✔ Instant support from community members through our private discord channel.
✔ Daily updates with the latest tutorials & news in the hacking world.
✔ Daily resources like CTFs, bug bounty programs, onion services and more!
✔ Access our VIP community & connect with like-minded people.
✔ Discounts on other zSecurity products and services.
This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.
This website uses Google Analytics and Linkedin to collect anonymous information such as the number of visitors to the site, and the most popular pages.
Keeping this cookies enabled helps us to improve our website.
Please enable Strictly Necessary Cookies first so that we can save your preferences!