About
Community
Bad Ideas
Drugs
Ego
Erotica
Fringe
Society
Technology
register | bbs | search | rss | faq | about
meet up | add to del.icio.us | digg it
Go Back   Community > Technology > Network (in)Security
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Network (in)Security Interesting hacks and cracks. Info on firewalls, TCP/IP, encryption, networks, and security. The ins and outs of the phone system, caller services, how things work, what's illegal and what's not, cellular phones, beepers, telephony legislation, the PUC, ISDN, taps, who's listening, and switches. Talking about phones, hacking systems, technical advice, and such is completely LEGAL in the United States -- it's covered by the First Amendment. What's illegal is conspiracy to commit a crime. So if you say something like "Meet me at 2am so we can crack a can" or "I changed my cell phone's number myself" you are criminally liable. Stating "You can crack a can by doing thus-and-so" or "If you wanted to change a cell phone's number, you could do it like so" is perfectly OK. Posting passwords, calling card numbers, or credit card numbers is forbidden on this network. Posting such info will get you booted off the net.

Reply
 
Thread Tools Display Modes
 #1 
Old 2006-03-17, 18:47
baddog30755 baddog30755 is offline
Regular
 
Default binding .exe files to .jpg files

I need some help on finding a binder that will do this! Everytime that I combine a keylogger to a .jpg file it shows that its a exe file. Can anyone help me on this?
 #2 
Old 2006-03-18, 05:26
Kai Kai is offline
Regular
 
Default Re: binding .exe files to .jpg files

A keylogger can't be run as a JPG file.
 #3 
Old 2006-03-18, 06:36
ilja ilja is offline
Regular
 
Default Re: binding .exe files to .jpg files

What you're asking for is not really possible. There used to be issues on windows with extentions, where you'd have stuff like HotNakedChick.jpg.exe and it'd show "HotNakedChick.jpg" and not the .exe part, so people clicked on it not knowing they were executing a binary. IIRC such tricks don't work anymore.

Only thing I can think of is seeing which viewer they use, find a bug in it and embed the .exe in the jpg file, exploit the viewer and then run the .exe file.
 #4 
Old 2006-03-18, 16:55
VolatileShiftInPersona VolatileShiftInPersona is offline
Regular
 
Default Re: binding .exe files to .jpg files

Keyloggers can be embedded in .wav files.
 #5 
Old 2006-03-18, 20:48
baddog30755 baddog30755 is offline
Regular
 
Default Re: binding .exe files to .jpg files

Thanks for your help
 #6 
Old 2006-03-18, 21:19
baddog30755 baddog30755 is offline
Regular
 
Default Re: binding .exe files to .jpg files

I actually tried embedding the Perfect Keylogger into a .wav file it still showed up as a .exe. Maybe one day I will post a program where you can actually trick the other user into thinking he has a .wav file and not a .exe. So if anyone comes up with this before I do. Then I'm retarded. Thanks
 #7 
Old 2006-03-19, 00:27
Rush2112 Rush2112 is offline
Regular
 
Default Re: binding .exe files to .jpg files

You misunderstand. Jpegs and wavs do not run code when you open them. Naming something xxxx.jpg.exe will only work if the person receiving your file is a retard who hides file extensions.

The only way to embed code in such a file is to find an exploit (usually a buffer overflow) in the program used to open the file. For example, if winamp had a bug where a .wav file crafted in a particular way (ie, not a real .wav file, but an arbitrary stream of bits which winamp would open under the assumption that it was a real .wav) was able to overflow a buffer, you could manipulate your file to execute arbitrary code, such as a key logger. Finding such an exploit is hard; as soon as they become known, they tend to be patched. If you discover one of your own, you could pull it off, but you're unlikely to be capable of that.

You can't just rename a .exe to have a .jpg extension, otherwise everyone would be exploitable.
 #8 
Old 2006-03-19, 17:23
M0rt M0rt is offline
Regular
 
Default Re: binding .exe files to .jpg files

For the record.

There has been a security issue with jpeg vulnerability in win os. The first exploit was written by FoToZ (I belive). John Bissell wrote a GDI+ jpeg remote exploit in sep 2004 after that.

This vulnerability was patched for.

 #9 
Old 2006-03-19, 19:46
smokeymcpot420 smokeymcpot420 is offline
Regular
 
Default Re: binding .exe files to .jpg files

I renamed a .exe file to .jpg.exe and avg detected it!
 
To the best of our knowledge, the text on this page may be freely reproduced and distributed.
 

totse.com certificate signatures
 
 
About | Community | Bad Ideas | Drugs | Ego | Erotica | Fringe | Society | Technology
Hot Topics