r00t-3xp10it / Backdoorppt
transform your payload.exe into one fake word doc (.ppt)
Stars: ✭ 397
Programming Languages
shell
77523 projects
Labels
Projects that are alternatives of or similar to Backdoorppt
Payloads
Payload Arsenal for Pentration Tester and Bug Bounty Hunters
Stars: ✭ 421 (+6.05%)
Mutual labels: payload
link
link is a command and control framework written in rust
Stars: ✭ 345 (-13.1%)
Mutual labels: payload
Xxe Injection Payload List
🎯 XML External Entity (XXE) Injection Payload List
Stars: ✭ 304 (-23.43%)
Mutual labels: payload
payload
PSR-15 middleware to parse the body of the request with support for json, csv and url-encode
Stars: ✭ 30 (-92.44%)
Mutual labels: payload
Horus-Eye
Just Simple Code To Play With Android Payloads (;
Stars: ✭ 54 (-86.4%)
Mutual labels: payload
Writeups
This repository contains writeups for various CTFs I've participated in (Including Hack The Box).
Stars: ✭ 61 (-84.63%)
Mutual labels: payload
Malware Jail
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Stars: ✭ 349 (-12.09%)
Mutual labels: payload
pakkero
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
Stars: ✭ 143 (-63.98%)
Mutual labels: payload
Gray hat csharp code
This repository contains full code examples from the book Gray Hat C#
Stars: ✭ 301 (-24.18%)
Mutual labels: payload
rop-benchmark
ROP Benchmark is a tool to compare ROP compilers
Stars: ✭ 23 (-94.21%)
Mutual labels: payload
HatVenom
HatVenom is a HatSploit native powerful payload generation tool that provides support for all common platforms and architectures.
Stars: ✭ 84 (-78.84%)
Mutual labels: payload
pix-payload-generator.net
Gerar payload para qrcode estático PIX. (Sistema de pagamento instantâneo do Brasil) Sem a necessidade de conexão com um PSP.
Stars: ✭ 23 (-94.21%)
Mutual labels: payload
CVE-2021-44228-PoC-log4j-bypass-words
🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
Stars: ✭ 760 (+91.44%)
Mutual labels: payload
Raasnet
Open-Source Ransomware As A Service for Linux, MacOS and Windows
Stars: ✭ 371 (-6.55%)
Mutual labels: payload
Nosqlinjection wordlists
This repository contains payload to test NoSQL Injections
Stars: ✭ 269 (-32.24%)
Mutual labels: payload
backdoorppt - 'Office spoof extensions tool'
Version release: v1.7-Stable
Author: pedro ubuntu [ r00t-3xp10it ]
Distros Supported: Linux Kali, Ubuntu, Mint
Suspicious-Shell-Activity© (SSA) RedTeam develop @2017
Transform your payload.exe into one fake word doc (.ppt)
Simple script that allow users to add a ms-word icon to one
existing executable.exe (using resource-hacker as backend appl)
and a ruby one-liner command that will hidde the .exe extension
and add the word doc .ppt extension to the end of the file name.
Spoof extension methods
backdoorppt tool uses 2 diferent extension spoof methods:
'Right to Left Override' & 'Hide Extensions for Known File Types'
Edit the 'settings' file to chose what method should be used..
cd backdoorppt && nano settings
Dependencies (backend applications required)
xterm, wine, ruby, ResourceHacker(wine)
'backdoorppt script will work on wine 32 or 64 bits'
'it also installs ResourceHacker under .../.wine/Program Files/.. directorys'
Tool Limitations
1º - backdoorppt only supports windows binarys to be transformed (.exe -> .ppt)
2º - backdoorppt requires ResourceHacker installed (wine) to change the icons
3º - backdoorppt present you 6 available diferent icons (.ico) to chose from
4º - backdoorppt does not build real ms-word doc files, but it will transform
your payload.exe to look like one word doc file (social engineering).
Backdoorppt working (Kali distros)
transformed files on-target system (windows)
Final notes
Target user thinks they are opening a word document file,
but in fact they are executing one binary payload insted.
Video tutorials:
backdoorppt: https://www.youtube.com/watch?v=k4UJW4p1E3w&t=1s
Special thanks:
@Damon Mohammadbagher | Article: goo.gl/hKHesk
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].