Contrabbando di dati EXIF
Sintesi redazionale: URL dell'articolo: https://github.com/signalblur/exifsmugglingpoc URL dei commenti: https://news.ycombinator.com/item?id=48467759 Punti: 38 # Commenti: 18. Fonte originale: https://github.com/signalblur/exifsmugglingpoc
<p>A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching (such as that of a Web Browser) can be used to passively download the payload.</p><p>As a result, the example loader (`chrome_poc.ps1`</p><p>) does not need to make any internet requests to fetch the second stage payload.<br>Instead, it simply extracts it from the Chrome browser's cache.</p><p>For full details see: https://malwaretech.com/2025/10/exif-smuggling</p><p>`python3 build_clickfix_cmd.py --input-file chrome_poc.ps1 --output-file encoded_command.txt --fake-path "C:\test\doc.txt"`</p><p>`python3 exif_smuggling.py --input-file image.jpg --output-file payload.jpg --payload hello_world.dll`</p><p>`www/index.html`</p>