Welcome back.
In this video, I want to show you a cool way that you can make your executable seem and look like another
file.
So what I'm going to do right now is I'm going to mask our shell trick that we created from the previous
video to look like a car image.
And what you will need for this is you're going to need a car image.
Or basically it doesn't even have to be an image or a car.
It can be any file type that you want.
If you want to create it to be a PDF file, you can.
If you want to create it to be a JPEG file, you can just follow along.
And the process of doing that is the same for every file type.
So two things you're going to need a file that you want your executable to look like and the executable
itself.
So this is the same payload from the previous video, which is the regular Windows Shell.
And what I'm going to do is I'm going to copy it to the desktop real quick.
And once you got these two files on your desktop, you are ready to go.
Now, the first thing that we must do is we must make an icon file from this PNG file.
And how can we do that?
Well, we can just open the Google Chrome or any search engine and type PNG to icon.
You can navigate to the first link in case you chose a PNG file and it will lead you to this convert
icon for it allows us to simply just upload our PNG image and it will create an icon file with that
image.
So I'm going to lower the screen.
Then, as it says right here.
Drop your files.
I will drop it right here.
It will take a few seconds.
And right here.
Our file should appear once it's done.
Here at this we can download it by pressing this arrow.
And it will download the car dot echo file for us.
So I'm going to show it in folder.
Paste it on my desktop and now we're good to go.
We got the card that PAG, which is the image.
We got this card, that icon which we're going to use to make our executable, have this icon right
here and we're going to merge it with this PNG image in order for once the target executes our program,
it also opens this image.
Let me show you how it would look like.
So all you want to do, you want to select these two files, right click on them and click Add to archive.
Click on this right here.
There are a few settings that we must set.
First, our high format should be zip.
Right here.
You want to check, create, SFX or Hive?
And here you can name your file whatever you want.
The only bad thing about this is that it will have an extension, but most of the people don't have
extensions enabled on their Windows system, so this will not present that big of a problem.
Okay, so let's go right here and call it car XY.
Then I want to go to the advanced step and click right here on SFX Options.
This will open this small window and we want to go through each step and set the settings accordingly.
In the update tab, you want to click extract and update files, and in the overwrite mode you want
to overwrite all files.
Then if I go to text an icon tab here, we want to click on this load SFX icon from the file.
Click on Browse, find the icon file that you just created.
In my case, it is on my desktop, so I'm going to select it.
Once you do that, you can move on to the next step.
So in the list tab, there is nothing that we want to set here.
Also, there is nothing that we want to set.
If I go to the advanced nothing in modes, we want to click on hide all and unpack to a temporary folder
after it in the setup.
We want to write both of our file names.
So in the run after extraction we want to type right here shell dot to exceed.
Just make sure you type the files name right here correctly.
So Shell dot tc is our executable and car dot pag is our image.
Okay.
Good.
Under the general, nothing here to do.
So once you set all of those options, you can click on, okay?
And you can click right here on okay as well.
And here it is.
We got the text on our desktop.
It has the icon of this image.
And once we go and execute it, it should also open this image.
But in the background it should also run our shell.
Tfsi Let's test it out.
But first we must set up our listener.
So open terminal.
Run MSF console.
Let's set up our listener.
So multi handler set payable to be regular windows interpreter.
Reverse dhcp ll host will be the IP address.
All my linux machine and LL Port if I remember correctly was 5555.
Now I can run this.
This will start the listener and if I go to my desktop and execute this file.
Well, for some reason it seems to have only opened this metal shell and it didn't open the image.
And this is something that happens sometimes so we can try to change some of the settings in order to
make this work.
But in this case, it was just a late opening.
So here is the image.
It opened right now for some reason that took a few seconds.
So let's just run it once again just to see whether it will open faster right now.
So I will run the listener once again and open cardiac.
It still seems to take some time, even though our metal shell is open.
So what we can do instead of this is we can, first of all, exit this shell, close this image that
opened 10 seconds after we execute it and we can start the MSV console again, delete this file and
we're going to change one setting which will hopefully make our file execute faster.
So let's go once again, zip here.
We want to name the file to be hard to see under the advanced SFX options and here under the setup is
something that we want to change.
So last time we specified the shell dot first.
Right now we're going to specify current PNG first and under it I'm going to specify Shell Dot TC,
then I'm going to click right here, hide all.
In the general.
Nothing in the update.
Extract and update files.
Overwrite all files.
Text an icon.
Lets select our icon file in the license and module.
There is nothing, so let just click on.
Okay.
It will create our file once again.
Not sure why I close them as a console.
When?
Right now we're going to set up our listener again and multi handler.
Later, Peter.
Set the outpost and the airport.
We want to run it.
Run the file and now it opens the image straight away.
So just make sure that you specify the image name first and then after it you can specify the shell
name.
And here we also got the interpreter session opened.
We can execute commands as usual.
So our program works good.
It has an icon of an image.
It also opens an image.
The only problem is this extension.
And there are some of the ways that you can fix this and make it seem like it doesn't have any extension.
But most of those ways automatically get detected by any antivirus out there.
Okay, great.
Now that we cover this, we are ready to finally get into the post exploitation section.
And here we're going to go into details with the interpreter shell, what options it has and what post
exploitation modules we can run after hacking the target.
See in the next video.