OP 26 January, 2024 - 11:39 PM
Bob the Smuggler is a tool that leverages the HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypts the archive and then hides it inside PNG/GIF image file format (Image Polyglots). The JavaScript embedded within the HTML will download the PNG/GIF file and store it in the cache. Following this, the JavaScript will extract the data embedded in the PNG/GIF, assemble it, perform XOR decryption, and then store it as an in-memory blob.
It can be used to simulate and identify potential security vulnerabilities within an organization's systems.
repo: https://github.com/TheCyb3rAlpha/BobTheSmuggler
It can be used to simulate and identify potential security vulnerabilities within an organization's systems.
repo: https://github.com/TheCyb3rAlpha/BobTheSmuggler