Welcome in this lecture we are going to see how to hide or embed our malware in a normal image basically
here where we integrate about modify with the help of MSF when I'm on my tablet and emailing that profile
in environment.
Image when you click on open that image file we get a better deal.
From here we can control a lot of the machine.
So let's see how go to this no.
So we need to create our medical file to embed in image so open the terminal and I MSF and an iPhone
be windows slash my reporter slash reward and the score at DCP here haven't been indicates which payload
we use.
Next we need to enter a host or local host IP to listen everyone's connection from that machine.
We can get to a local IP address by typing if config here is your local IP address.
Copy and paste hit
now enter the airport or local host port number on which the connection is to listen for the victim.
Here we are using what number 44 44 next to enter hyphen which indicates the format of and last into
the part where you want to save your metadata file.
It will take some time to generate reload as you can see a lot of reload is set this religion data now
our next step is to attach this payload with image to do this.
First we need to send this better file through our system.
Here is our payload and normal image in which we are going to embed our payload next.
We need to convert this image file to icon so open it browser and type ISP or convert to now.
Click on this link.
Next choose your image.
And set a icon solution as 64 pixels.
Large select with that it would click on convert.
As you can see our selected image is connected to icon
now selected would reload and image file.
Right click and select add to it you know Jane the name of your output file here.
I hope you and Ben now select the compress method to best next I'm going to select a two option as great
as effects or self extracting that you not need a new order compression software as a fix.
To you failed to extract just double click the SFX are a executable file and it will be extracted automatically
next go to a normal setting and select as the Fix option go to set.
Here you need to enter your board be alert and image names with their extension
no go to more and select had all option here.
Display all is a default selector.
However if you want to create a suffix are you expecting all files and folders that are glued to a specified
location such as next door without showing a window.
So we need to select hide all option.
Next we need to set a goal to reload which we can order.
Now click on load and select your icon last go to update option in main menu select extract and a bit
files in a bit more.
And what white all files in automate more.
As you can see a new image file is created.
So before we understand this image file with him we need to create a handler.
Will you send it it was collection from aggregate machine.
Here we are going to use my displayed framework to listen.
Edwards connection so type MSF console
noticed that handler.
I use exploit slash multi slash handler.
Next thing we need to set reload so type set reload windows slash interpreter slash reverse on the score
PSP similarly to set a load and it'll put on which we had are willing to listen it it was connection
so type set the host wanted to do 160 it would be free to do.
No that airport I said l put wood for food for last paper on two starkly and
so here I have taken my own windows machine for demonstration but it was now let's try to open this
image as you can see that immediate open and regarding position in terminal so that's how the hacker
embed their malware in not one image it thank you.