版权声明:转载请注明出处:http://blog.csdn.net/dajitui2024 https://blog.csdn.net/dajitui2024/article/details/79396549
参考原文:https://www.linkedin.com/pulse/social-engineering-simple-way-make-fake-file-backdoor-mohammadbagher?trk=v-feed&lipi=urn%3Ali%3Apage%3Ad_flagship3_feed%3BhvBApVbfaMCH9kNxX2OEFg%3D%3D
引用资源:https://github.com/r00t-3xp10it/backdoorppt
https://github.com/DamonMohammadbagher/FakeFileMaker
大概内容为,创建一个payload。exe后缀的文件。将图标修改为ppt的图标。修改后缀为 ppt.exe
![](https://ucc.alicdn.com/jq6r46bafx3ca/developer-article628553/20241020/a71b3b0731a94175bd54ffd183c024f5.png?x-oss-process=image/resize,w_1400/format,webp)
然后这样
![](https://ucc.alicdn.com/jq6r46bafx3ca/developer-article628553/20241020/f201ce8001064585bfeb53b89b701928.png?x-oss-process=image/resize,w_1400/format,webp)
效果是这样
注:确实给力,配合免杀,整合一用,确实很给力。不同于以往的单纯改后缀,这次是真的防不胜防,看来以后要多看一眼后缀格式再点开了。