diff --git a/bin/.bin/payload-generation/README.md b/bin/.bin/payload-generation/README.md new file mode 100644 index 00000000..07fcd4f5 --- /dev/null +++ b/bin/.bin/payload-generation/README.md @@ -0,0 +1,36 @@ +# Scripts for payload generation + +## generateImageFromPayload + +This script is designed to disguise a payload as an image. It does this by adding the first 20 bytes of a real image to the beginning of the file and adding a file extension. This will fool most filters that, for example, might only allow images to be uploaded. + +To use it, you will need to have a payload ready to use. It could be anything, here is a simple php script named payload.php + +```php +> $destination + else + "No such payload $payload" + echo "" + printUsage + fi +else + echo "No such template $template" + echo "" + printUsage + exit 1 +fi diff --git a/bin/.bin/payload-generation/templates/README.md b/bin/.bin/payload-generation/templates/README.md new file mode 100644 index 00000000..ce24da71 --- /dev/null +++ b/bin/.bin/payload-generation/templates/README.md @@ -0,0 +1,5 @@ +# Image templates + +These images are not real images. They take the first 20 bites of an example image of each type. + +By adding code to these, you will be able to evade many upload filters that only allow images diff --git a/bin/.bin/payload-generation/templates/payload.gif b/bin/.bin/payload-generation/templates/payload.gif new file mode 100644 index 00000000..bcfe4d15 Binary files /dev/null and b/bin/.bin/payload-generation/templates/payload.gif differ diff --git a/bin/.bin/payload-generation/templates/payload.jpg b/bin/.bin/payload-generation/templates/payload.jpg new file mode 100644 index 00000000..47ddd39b Binary files /dev/null and b/bin/.bin/payload-generation/templates/payload.jpg differ diff --git a/bin/.bin/payload-generation/templates/payload.png b/bin/.bin/payload-generation/templates/payload.png new file mode 100644 index 00000000..3334731b Binary files /dev/null and b/bin/.bin/payload-generation/templates/payload.png differ