[Release] QuickSpoofer - Spoof any file extension

[Release] QuickSpoofer - Spoof any file extension - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: Visual Basic & .NET Framework (https://sinister.ly/Forum-Visual-Basic-NET-Framework)
+--- Thread: [Release] QuickSpoofer - Spoof any file extension (/Thread-Release-QuickSpoofer-Spoof-any-file-extension)

Pages: 1 2

[Release] QuickSpoofer - Spoof any file extension - SQLi - 09-11-2013

Introduction
This is a file extension spoofer that I like to refer to as QuickSpoofer. This tool will enable you to spoof the extension of any file with ease. I threw this together at 5AM, so if you run into any errors, any at all, don't hesitate to report them on this thread. This has definitely been done before, but I just felt like I had to re-do it properly.

Things you may want to keep in mind is:

Don't have the file you're spoofing open in any other program
Don't write the true output extension manually, just select one

Screenshots

What it looks like when sent over Skype with settings (.pif, .mp4)
[Image: 2CQSJwZ.png]

Download
Without further ado, the download link: http://mediafire.com/
And because somebody will eventually ask, and because it's required when releasing software: http://virustotal.com/

RE: [Release] QuickSpoofer - Spoof any file extension - Oni - 09-11-2013

So, basically it changes the filename? This can be done in Linux by simply typing "mv /folder/pdf_file.pdf /folder/pdf_file.gif," although a program might be nice for Windows.

RE: [Release] QuickSpoofer - Spoof any file extension - SQLi - 09-11-2013

(09-11-2013, 06:00 AM)Oni Wrote: So, basically it changes the filename? This can be done in Linux by simply typing "mv /folder/pdf_file.pdf /folder/pdf_file.gif," although a program might be nice for Windows.

It has this neat little way of spoofing the extension. It doesn't just rename the file. Let me try to explain.

Okay, so Imagine [8238] representing a character code that makes any text after it appear reversed. I want the .exe extension to look like a normal .mp4 extension. The program inserts the charcter code, and reverses the mp4 extension text, so that it turns out normal, after being reversed twice.

Code:
C:\Path\To\File.exe => Spoof => C:\Path\To\File[8238]4pm.exe

It now looks like mp4 and exe switched position, and there's the final result.

Code:
C:\Path\To\Fileexe.mp4

Edit: and on top of this, you need to overwrite the original file with the new one, as it is impossible to perform a My.Computer.FileSystem.RenameFile() with the character code present in the string.

I hope I explained it clearly enough.

RE: [Release] QuickSpoofer - Spoof any file extension - zebra - 09-11-2013

Works like a charm. UI is sleek. Everything is pretty self explanatory. (Y)

RE: [Release] QuickSpoofer - Spoof any file extension - ErroraBorealis - 09-11-2013

This is nice, I'd imagine binding a file of the real extension to a virus and having them both run would be perfect.

RE: [Release] QuickSpoofer - Spoof any file extension - Ultimatum - 09-12-2013

Don't mean to trash or anything; however, spooking extensions is quite old. :/ It doesn't prevent AV protection, and may make it worse, if used outside of a crypter, extra AV detection.

But good work nevertheless.

RE: [Release] QuickSpoofer - Spoof any file extension - SQLi - 09-12-2013

(09-12-2013, 01:04 AM)Ultimatum Wrote: Don't mean to trash or anything; however, spooking extensions is quite old. :/ It doesn't prevent AV protection, and may make it worse, if used outside of a crypter, extra AV detection.

But good work nevertheless.

[Image: tumblr_mpt8fubVHV1swgfzvo1_250.gif]

Spooky extensions.

RE: [Release] QuickSpoofer - Spoof any file extension - Ultimatum - 09-13-2013

(09-12-2013, 04:24 PM)SQLi Wrote:
Spooky extensions.

Das right, scare the AVs away.

RE: [Release] QuickSpoofer - Spoof any file extension - Cyanide and Cynicism - 09-13-2013

(09-11-2013, 06:17 AM)SQLi Wrote: It has this neat little way of spoofing the extension. It doesn't just rename the file. Let me try to explain.

Okay, so Imagine [8238] representing a character code that makes any text after it appear reversed. I want the .exe extension to look like a normal .mp4 extension. The program inserts the charcter code, and reverses the mp4 extension text, so that it turns out normal

ok, that's cool. except that it's completely fucking useless.

RE: [Release] QuickSpoofer - Spoof any file extension - ErroraBorealis - 09-13-2013

(09-13-2013, 12:59 AM)Cyanide and Cynicism Wrote: ok, that's cool. except that it's completely fucking useless.

Because everybody would rather run an EXE than open a JPG or DOC. /sarcasm