[Kayoh]

Hey all, I’ve used a Right-to-Left-Override on a file in Kali and successfully changed the name from a .bat to look like a .jpg but when my target downloads the file from my apache2 server it shows on my windows machine as a .bat file still?

[Diego Pérez]

Hi!
Can you try to zip the file first? The download and uncompres it in your victim’s machine.

Let me know how it goes!
Diego

[Kayoh]

when extracting the file it shows a folder as _gpj for some reason. The file its self does show as a .jpg once its all extracted though so that does help thanks.

[Diego Pérez]

Hi!
Can you share a screenshot of what are you compressing in kali?
Also the result in windows please.

Thanks!
Diego

[Kayoh]

I’m compressing this and here is the output shown to the Windows machine:

View post on imgur.com

[Diego Pérez]

Hi Tcale!
As I can see the file in windows shows a proper spoofed extension.
The othe issues are because you left the right-to-left character when compressing the file, to avoid this just clear the suggested name by the compressing tool and write a new one.

Hope it helps!
Diego

[Kayoh]

Il give it a try awesome thanks

[Diego Pérez]

Hi!
Let me know how it goes!
Diego

[Author]

Posts