[Psych1c]

PowerShell script that hides the app/malware file extension by padding the filename with spaces.

This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code

‎

Example picture: 

‎ ‎ 

Example video:

https://sendvid.com/ml86udlc

‎ 

Use command:

.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"

‎ ‎ 

Script:

Hidden Content

You must register or login to view this content.

[kaz]

This doesn't appear to pass even a cursory MIME check.

[Psych1c]

This doesn't appear to pass even a cursory MIME check.

There's other methods for MIME checks, this method works for direct installs and physical/irl spreading.

[itskilim]

example video is down already

[Psych1c]

example video is down already

video link updated

[Grokly]

let me have a look thanks for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[VibeHacking]

lets take a look brooo

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[nobodycares]

You don't use special caracters that invert the text after the dot character?
I'm curious to see that

EDIT:
Damn! That's smart thanks for that man!

[distort5656]

You must reply to this thread to view this content.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[IntelShadow]

It looks really good

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.