Robsec

Okay, so the other day I bumped into  this tweet  which introduced me to this nifty tool called  JPEG snoop  by Calvin Hass.  [ Virustotal Scan Link ] It basically allows you to upload an image and check its structure including the EXIF headers where the image metadata is stored. This also includes GPS location data with the syntax {degrees, minutes, seconds} for the latitude and the longitude reference. You can take this data and plug it into  this GPS coordinates site  to get the actual location mapped onto Google Maps. A cool project idea would be to integrate the tool and the module on this site to allow users to get the location where a picture was taken at the click of a button, thereby making it much easier for investigators in DFIR to get their job done. *the above shared data/information is only to be used for educational purposes Demo Video

so i was just walking around my space in the cybers (on twitter to be exact) when i came across this tweet by  +KitPloit  , one of my more reliable sources of new tools on the penetration testing and vulnerability assessment scene (i am not a hacker of any sort...lol). it mentioned how it was possible to "recover your stored wifi passwords" which my brain translated as "steal someone's wifi passwords" and i decided to check out what sorcery this was by analysing the source code.. the code on github  by LionSec  had just 120 lines in python and since it was supposed to work for both windows and linux platform (according to the code, mac wasn't supported yet), i assumed the section with respect to windows would be even shorter if you factor in error handling as well. after checking the imports (sys, subprocess) i immediately realised that some system commands would be called from within the script and executed. that also meant that i could easily re...

The project is comprised of 3 modules: The embedding Module which is written in Ruby The Execution/ exploiting stage The IMP Scanner, to scan for Images with Malicious Programs (IMP) For the embedding the following are the stages: Generate malicious program (malp.exe) using msfpayload from metasploit encode the generated program (malp.exe) using msfencode from metasploit obfuscate malp.exe using UPX or any other suitable packer like Themida to make sure it is not detected by antivirus. embed malip.exe into selected stegoimage (stegoimg.jpg) using F5 algorithm (for transform domain steganography) or Jsteg (for spatial domain steganography). the size of the image should be more than double the size of malp.exe to be safe and to ensure no distortion occurs. Deploy the image to the target machine. Many possible ways of doing this including keydrops with manipulated autorun.inf file to extract malp from stego or passive propagation via FTP shared folder and then later...