GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → nopn0p → xzf

nopn0p / xzf

Licence: other
EXIF-based command and control PoC

Programming Languages

c
50402 projects - #5 most used programming language
shell
77523 projects
python
139335 projects - #7 most used programming language

Labels

exifpentestingdata-exfiltration

Projects that are alternatives of or similar to xzf

Go Exif
A very complete, highly tested, standards-driven (but customizable) EXIF reader/writer lovingly written in Go.
Stars: ✭ 186 (+878.95%)
Mutual labels:  exif
slack-metabot
Extract metadata (EXIF) from uploaded files on Slack
Stars: ✭ 15 (-21.05%)
Mutual labels:  exif
wa-sticker-formatter
Sticker Creator for WhatsApp
Stars: ✭ 60 (+215.79%)
Mutual labels:  exif
Forensic Tools
A collection of tools for forensic analysis
Stars: ✭ 204 (+973.68%)
Mutual labels:  exif
rexiv2
Rust library for read/write access to media-file metadata (Exif, XMP, and IPTC)
Stars: ✭ 64 (+236.84%)
Mutual labels:  exif
iptcinfo3
iptcinfo working for python 3 finally do pip3 install iptcinfo3
Stars: ✭ 37 (+94.74%)
Mutual labels:  exif
Mmalsharp
C# wrapper to Broadcom's MMAL with an API to the Raspberry Pi camera.
Stars: ✭ 152 (+700%)
Mutual labels:  exif
goexif2
MAINTAINER WANTED -- Decode embedded EXIF meta data from image files written in Pure Golang
Stars: ✭ 35 (+84.21%)
Mutual labels:  exif
Conf-Thief
A Red Team tool for exfiltrating sensitive data from Confluence pages.
Stars: ✭ 77 (+305.26%)
Mutual labels:  data-exfiltration
exiftool-json-db
Maintain a JSON database of photos and videos with their metadata
Stars: ✭ 18 (-5.26%)
Mutual labels:  exif
Pel
PHP Exif Library - library for reading and writing Exif headers in JPEG and TIFF files using PHP.
Stars: ✭ 232 (+1121.05%)
Mutual labels:  exif
TinyEXIF
Tiny ISO-compliant C++ EXIF and XMP parsing library for JPEG.
Stars: ✭ 87 (+357.89%)
Mutual labels:  exif
facebook-data-image-exif
UI tool to add EXIF data back to images in a Facebook data export
Stars: ✭ 39 (+105.26%)
Mutual labels:  exif
Exiftool Vendored.js
Fast, cross-platform Node.js access to ExifTool
Stars: ✭ 200 (+952.63%)
Mutual labels:  exif
exif
The fastest Ruby EXIF reader.
Stars: ✭ 133 (+600%)
Mutual labels:  exif
Aphotomanager
Manage local photos on Android: gallery, geotag with photomap, privacy, tags, find, sort, view, copy, send, ... .
Stars: ✭ 164 (+763.16%)
Mutual labels:  exif
tyf
Manipulate EXIF and IFD metadata.
Stars: ✭ 16 (-15.79%)
Mutual labels:  exif
pyexiv2
Read/Write metadata(including EXIF, IPTC, XMP), comment and ICC Profile embedded in digital images.
Stars: ✭ 120 (+531.58%)
Mutual labels:  exif
go-jpeg-image-structure
Parse JPEG data into segments via code or CLI from pure Go. Read/export/write EXIF data. Read XMP and IPTC metadata.
Stars: ✭ 47 (+147.37%)
Mutual labels:  exif
naturtag
Tag your nature photos with iNat taxonomy and observation metadata
Stars: ✭ 20 (+5.26%)
Mutual labels:  exif
View All Similar Projects ➔

Introduction

xzf is a simple PoC demonstrating how EXIF data can be used for command and control. xzf GETs an image from a predetermined URL, then reads the software tag for an authentication string. If the string matches, xzf will execute anything contained within the ImageDescription tag.

Usage

  1. Choose your auth string and XOR key, then use xor.py to XOR out the string
  2. Choose an image and use gexif to add your commands to execute in ImageDescription and your auth string to the Software tag.
  3. XOR out the desired filename
  4. Upload the image (not imgur) and add all values to consts.h
  5. Deploy

Requirements

  • libcurl
  • libexif

References

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].