HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 25 guests and 3 members online
EH-Net Donations

Enter Amount:
$
Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations



 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Malwarearrow Injecting Virus in pics...
Ethical Hacker Community Forums
January 08, 2009, 09:56:54 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2009 - May 4 - 9. Boot Camps & an Ethical Hacking Conf. www.chicagocon.com
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
« previous next »
  Print  
Author Topic: Injecting Virus in pics...  (Read 4885 times)
0 Members and 1 Guest are viewing this topic.
rok
Newbie
*
Offline Offline

Posts: 39


View Profile
« on: July 26, 2008, 02:02:41 AM »
Injecting xss or shell in picture(jpeg or etc) works very nice.I made my small childish lab last night and was tring to actually injecting a virus(.exe) in a picture and then hosted it.So when I tested on me,it did not infect me..is it possible actually to small .exe servers in pics...


I know it's Unethical,just for knowledge purpose.Hope you understand.
Logged
shakuni
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #1 on: July 28, 2008, 09:19:18 AM »
You can find it easily on the web. And if you can't find it then probably this info is not safe in your hands.
Logged
There is no rule, law or tradition that apply universally... including this one.
rok
Newbie
*
Offline Offline

Posts: 39


View Profile
« Reply #2 on: July 29, 2008, 06:44:02 AM »
Quote from: shakuni on July 28, 2008, 09:19:18 AM
You can find it easily on the web. And if you can't find it then probably this info is not safe in your hands.


I just want to know,is it possible for an exe format to act like a mp3..?Only binding won't work here..please help
Logged
Negrita
Sr. Member
****
Offline Offline

Posts: 289



View Profile
« Reply #3 on: July 29, 2008, 02:01:39 PM »
Try working your way through these; http://www.hellboundhackers.org/challenges/stegano/index.php. You'll have to register at that site first. Once you've done the challenges, I believe that you'll be able to answer your own question.
Logged
CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003

There are 10 kinds of people, those that understand binary, and those that don't.
geekyone
Full Member
***
Offline Offline

Posts: 132



View Profile
« Reply #4 on: July 29, 2008, 04:12:46 PM »
Thanks for the link Negrita!  It looks like a cool site.
Logged
CISSP, CEH, GPEN, GCIH
Negrita
Sr. Member
****
Offline Offline

Posts: 289



View Profile
« Reply #5 on: July 30, 2008, 01:21:30 PM »
My pleasure.  Smiley
Logged
CEH, CCSA NG/AI, NNCSS, MCP, MCSA 2003

There are 10 kinds of people, those that understand binary, and those that don't.
rok
Newbie
*
Offline Offline

Posts: 39


View Profile
« Reply #6 on: July 31, 2008, 06:19:46 AM »
Thans for the link.

But it's more of steganography,steg will only hide the data,but it won't be executed..??
Logged
Kev
Sr. Member
****
Offline Offline

Posts: 359


View Profile
« Reply #7 on: August 01, 2008, 10:10:18 AM »
I think you will find what you are trying to do is difficult, unless you force the pic to open as an html and exploit the browser. 
Logged
oleDB
Full Member
***
Offline Offline

Posts: 231



View Profile WWW
« Reply #8 on: August 01, 2008, 10:34:44 AM »
Most of the stuff I've seen revolves around buffer overflows that occur when images(GIF, ANI, etc) are processed and shellcode is tacked on. I believe with the onload function in javascript and probably activeX as well, you can have whatever you want executed when the image is loaded on the page.
Logged
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 205

Klaatu, Borada,Necktie?


View Profile
« Reply #9 on: August 08, 2008, 02:08:33 PM »
Apparently this garnered some attention at BlackHat this week.  Rich Mogull gave a little write up about it over on Securosis, but I've been seeing a lot of others talking about it, too.
Logged
MCP, Security+, Associate (ISC)2
RoleReversal
Hero Member
*****
Offline Offline

Posts: 508


View Profile WWW
« Reply #10 on: August 09, 2008, 03:34:07 AM »
Oneeyedcarmen,

thanks for the link, I haven't come across that attack vector before. Unfortunately it sounds fairly promising (one more reason to disable javascript, thank you NoScript).

Was anyone at this talk @ Blackhat? more technical information regarding the vector would be good.
Logged
A little bit of sanity:
http://www.infosanity.co.uk
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 205

Klaatu, Borada,Necktie?


View Profile
« Reply #11 on: August 09, 2008, 09:23:57 AM »
a few of our lurkers and occasional posters were there, so hopefully we'll get some more detail when they return
Logged
MCP, Security+, Associate (ISC)2
geekyone
Full Member
***
Offline Offline

Posts: 132



View Profile
« Reply #12 on: August 09, 2008, 07:50:39 PM »
Here is a link from one of the presenters with some information about it.

http://blogs.zdnet.com/security/?p=1666
Logged
CISSP, CEH, GPEN, GCIH
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 205

Klaatu, Borada,Necktie?


View Profile
« Reply #13 on: August 11, 2008, 01:32:19 PM »
Nate and Rob discuss the GIFAR talk on the Network Security Podcast
Logged
MCP, Security+, Associate (ISC)2
Pages: [1]   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2007, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.124 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net

Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.