[kuk27]

sorry to do this but this forum is for education and my question wasn't answered.


kuk27 [0]
Does any one know how to put a trojan or payload inside a jpeg? I can't get it done. All that happens is i can bind it with an exe.

(Today 03:17 PM) Geoff [48]
This has been asked countless times. Use the search feature.

Short answer is, you cant... have it execute/run at least. You can embed it but it wouldnt do anything. Long answer is going to be short as well... but theoretically it could be done to some degree. but chances are someone that is advanced enough to pull this off isnt interested in binding malware to images.



what I wanted to know is if it will work with a buffer overflow and how would I go about it.

[kuk27]

sorry to do this but this forum is for education and my question wasn't answered.


kuk27 [0]
Does any one know how to put a trojan or payload inside a jpeg? I can't get it done. All that happens is i can bind it with an exe.

(Today 03:17 PM) Geoff [48]
This has been asked countless times. Use the search feature.

Short answer is, you cant... have it execute/run at least. You can embed it but it wouldnt do anything. Long answer is going to be short as well... but theoretically it could be done to some degree. but chances are someone that is advanced enough to pull this off isnt interested in binding malware to images.



what I wanted to know is if it will work with a buffer overflow and how would I go about it.

[chmod]

The question was answered by @Geoff there was no need to open this thread
/closed

[chmod]

The question was answered by @Geoff there was no need to open this thread
/closed

[The Real Slim Shady]

This is a much better question.

Theoretically yes, it could work with a buffer overflow. But it wouldnt be a vulnerability in the jpg format/standard itself, it would be in the application that is opening/processing the jpg file.

This means something like MS Paint, Photoshop,etc. To my knowledge there are no such known vulnerabilities. In order to find such a vulnerability though you would need to have thorough understanding of how those applications implement the jpg standards. Which unless you hack their servers and access the source code, would require a strong understanding of software reverse engineering, assembly/disassembly processes, etc.

[The Real Slim Shady]

This is a much better question.

Theoretically yes, it could work with a buffer overflow. But it wouldnt be a vulnerability in the jpg format/standard itself, it would be in the application that is opening/processing the jpg file.

This means something like MS Paint, Photoshop,etc. To my knowledge there are no such known vulnerabilities. In order to find such a vulnerability though you would need to have thorough understanding of how those applications implement the jpg standards. Which unless you hack their servers and access the source code, would require a strong understanding of software reverse engineering, assembly/disassembly processes, etc.