Viewing 8 posts - 1 through 8 (of 8 total)
  • Author
    Posts
  • June 21, 2020 at 3:15 pm #40487
    Kayoh
    Participant

    Hey all, I’ve used a Right-to-Left-Override on a file in Kali and successfully changed the name from a .bat to look like a .jpg but when my target downloads the file from my apache2 server it shows on my windows machine as a .bat file still?

    June 22, 2020 at 5:58 am #40507
    Diego PérezDiego Pérez
    Moderator

    Hi!
    Can you try to zip the file first? The download and uncompres it in your victim’s machine.

    Let me know how it goes!
    Diego

    June 22, 2020 at 7:19 pm #40555
    Kayoh
    Participant

    when extracting the file it shows a folder as _gpj for some reason. The file its self does show as a .jpg once its all extracted though so that does help thanks.

    June 23, 2020 at 3:52 am #40579
    Diego PérezDiego Pérez
    Moderator

    Hi!
    Can you share a screenshot of what are you compressing in kali?
    Also the result in windows please.

    Thanks!
    Diego

    June 23, 2020 at 7:28 pm #40631
    Kayoh
    Participant

    I’m compressing this and here is the output shown to the Windows machine:

    View post on imgur.com

    June 24, 2020 at 4:10 am #40642
    Diego PérezDiego Pérez
    Moderator

    Hi Tcale!
    As I can see the file in windows shows a proper spoofed extension.
    The othe issues are because you left the right-to-left character when compressing the file, to avoid this just clear the suggested name by the compressing tool and write a new one.

    Hope it helps!
    Diego

    June 24, 2020 at 8:16 am #40659
    Kayoh
    Participant

    Il give it a try awesome thanks

    June 25, 2020 at 3:36 am #40712
    Diego PérezDiego Pérez
    Moderator

    Hi!
    Let me know how it goes!
    Diego

  • Author
    Posts
Viewing 8 posts - 1 through 8 (of 8 total)
  • You must be logged in to reply to this topic.