Popular tools MNMNP Checker MBBulk MNP Checker IMIMEI Checker /24Subnet Calculator All tools →
Exploits

FakeImageExploiter – Use a Fake Image to Exploit Target

This module takes one existing image.jpg and one payload.ps1 (input by user) and builds a new payload (agent.jpg.exe) that if executed it will trigger the download of the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them. This module also changes the agent.exe Icon to m

C CyTools NOVEMBER 14, 2018 · 1 MIN READ

This module takes one existing image.jpg and one payload.ps1 (input by user) and builds a new payload (agent.jpg.exe) that if executed it will trigger the download of the 2 previous files stored into apache2 (image.jpg + payload.ps1) and execute them.

This module also changes the agent.exe Icon to match one file.jpg Then uses the spoof ‘Hide extensions for known file types’ method to hidde the agent.exe extension.
All payloads (user input) will be downloaded from our apache2 webserver and executed into target RAM. The only extension (payload input by user) that requires to write payload to disk are .exe binaries.

Download/Install/Config

1º – Download framework from github 

 git clone https://github.com/r00t-3xp10it/FakeImageExploiter.git 

2 – Set files execution permitions 
 cd FakeImageExploiter
 
sudo chmod +x *.sh 
 3º – Config FakeImageExploiter settings
nano settings 
 4º – Run main tool 
 sudo ./FakeImageExploiter.sh

Video tutorials:

FakeImageExploiter [ Official release – Main funtions ]: https://www.youtube.com/watch?v=4dEYIO-xBHU

FakeImageExploiter [ the noob friendly funtion ]: https://www.youtube.com/watch?v=abhIp-SG4kM

FakeImageExploiter [ bat payload – worddoc.docx agent ]: https://www.youtube.com/watch?v=Ah4hejGhj-M

FakeImageExploiter [ txt payload – msfdb rebuild ]: https://www.youtube.com/watch?v=g2E73GyxKhw

Add Cyber Kendra as a preferred sourceGet our reporting higher in your Google Top Stories

Was this article helpful?

If something here is wrong or out of date, tell us and we will check the source.

Report an error

Related reading

See all
BugBounty

HExHTTP – HTTP Header Exploitation Tool

HExHTTP is a tool designed to perform tests on HTTP headers and analyze the results to identify vulnerabilities and interesting behaviors. Features Server Error response checking Localhost header response analysis Vhosts checking Methods response analysis HTTP Version analysis [Experimental] Cache P

January 28, 2025 Exploits

Xzbot: Exploit Demo for the xz backdoor (CVE-2024-3094)

Exploration of the xz backdoor (CVE-2024-3094). Includes the following: honeypot: fake vulnerable server to detect exploit attempts ed448 patch: patch liblzma.so to use our own ED448 public key backdoor format: format of the backdoor payload backdoor demo: cli to trigger the RCE assuming knowledge o

April 1, 2024 Exploits

Exploit Released for VMware Aria Operations for Networks RCE (CVE-2023-20887) Bug

A group of researchers has unveiled a proof-of-concept (PoC) demonstration for a serious Remote Code Execution (RCE) vulnerability present in VMware’s Aria Operations for Networks. This software suite is commonly utilized by large-scale networks, making the potential impact of this vulnerability qui

June 14, 2023 Forensic Tool

teler : Real-time HTTP Intrusion Detection

Teler is a real-time intrusion detection and threat alert based on a weblog that runs in a terminal with resources that we collect and provide by the community. ❤️ Features Real-time: Analyze logs and identify suspicious activity in real time. Alerting: teler provides alerting when a threat is detec

December 4, 2022