i BACKDOORED a Desktop Shortcut (to run malware)

[@TwoBitSorcerer]

This video is genuinely brilliant! It's one of the things I really admire about this field: using standard stuff differently and creatively! Thanks John!

[@apekatt2007]

Research LOLBAS if you liked this :)

[@htxFINESSA]

Best way to get control

[@ima_igo]

How to use? ​@@apekatt2007

[@BillAnt]

Really great info even for general users who would like to spot these tricks. I always had a funny feeling about LNK files, and examined every one which I downloaded before executing.

[@AnthraxGg-by8zz]

I made an implant where target device connects back to c2, I was thinking of an idea to somehow make it more user-friendly for windows users, and here you provided ma lead, thanks brother!

[@marcoimbellicai4419]

Very nice video! As a cybersecurity master student, i really enjoy this content. Also, i envy your hair

[@mayb.developer.inactive]

Ive been waiting for this master piece of a video!

[@r3tr0n17]

That watch is SOOOOOOOPERRRRR.... DOPE!!

[@leapbtw]

many of your videos are mindblowing to me, but you weaponized shortcuts here !!!

[@MStrong95]

Are there any other interesting polyglot file format hybrids that exist? Seems like an interesting video series idea

[@amateurprogrammer25]

PKZIP (.zip files) will polyglot with almost anything since they put all their header information at the end of the file rather than at the beginning. in fact pretty much all self extracting zip files that exist are extremely-easy-to-create .exe/.zip polyglots. you take a generic exe zip extractor that tries to open itself as a zip file and just concatenate whatever zip file you want.

[@mrmonday2000]

Windows has a MAX_PATH variable in C that is 256 bytes, therefore, anything taking in a path (even if you /c cmd) will be limited to 256 bytes

[@darkdagger032]

Quite informative video, John. Thanks for your hard work!!!

[@gamereditor59ner22]

0:15 : Interesting....🤔

[@foadchode]

fun pranks to try in the school computer lab vol. 2

[@hakeeminfosec]

I had this doubt (can we alter this application) since I accidentally opened a software's shortcut with VS Code and got to see this whole messy binary thing, and thankfully I understand now. So thankyou for this video :)

[@tinotheplayer]

really creative solution!

[@vivaanvivaan3920]

sir awesome stuff... please upload more videos about this kind of topic.... seriously awesome....we love you sir❤

[@Dannytello]

Brilliant creativity bro😁😁

[@AlwaysInstallElevated]

Keep Going Up❤❤

[@Braaaains]

How would you deploy it tho? (Curious as a nontech [IT-ignorant] individual)

[@MoofyYT]

post exploitation

[@Braaaains]

@@MoofyYT I realise that. What I was unsure about is whether it's just snooping or also tagging and backdoor -- again, being an nontech individual

[@iWhacko]

@@MoofyYT or even email it in a zip file with other innocent files, and hope the person runs it

[@MoofyYT]

@@iWhacko yep this. Or even as a standalone with a shortcut to a site, and lolbin download of another payload in the bg. But normally I'd just drop one in an open share of an internal.

[@zionstemple]

John really appreciate how you take informative information and present it simply and effectively. Love your channel.

[@philto9999]

I remember doing this lnk thing to be able to play diablo 2 in windowed mode by adding a -w at the end :p

[@ReligionAndMaterialismDebunked]

I was thinking about someone on KZbin comments, or in a live chat, I forgot where, who said that he/she hates people that talk with their hands. Hahahaha. Seeing you talk with your hands, like I, and many of us do, reminded me of that. I'm part Italian, and Italians are known for talking with their hands. :3 Cheers, brother! Shalom. 🤝😁

[@apekatt2007]

Weird, dude

[@casperes0912]

It's boring to look at someone completely motionless talk

[@bnk28zfp]

thank you John!

[@ChrisRebik]

Love your Red Team shirt where can I buy one? I want to get that shirt! Thanks

[@theonething-0312]

You are on sponsored!

[@smartnima]

Oh wow this is really cool!

[@Knights_Ride]

Awesome video jhon❤❤ 🇮🇳🇮🇳🇮🇳🇮🇳❤❤

[@kedirmamo7818]

It is my unfolded Thanksgiving for your restless and selflessly working for the benefit of needy users like me who founded in the edge of cliff resulting me loose up trust from someone who is presenting youtube videos help fix problems with Google betrayal to privacy, selling users data and irresponsible in stay safe to google account and passwards etc was pushing me to the new" IT and Hacking courses" inorder providing study,, knowledge and skill on how to get out of problems indepently by using my ip adress, google account network,wifi since months ago. This is one of usefully presented video out of what you have share users, especially me from the day of onsets of these problems.

[@Tokga-m5r]

guys i need to know is ai the go to for subnet solving now, like literally is it , and by the way john i hear you mentioning opening the flood gates by learning programming first ,i have books but its so theory based and im a hands on guy can you make a in depth video of your theory

[@ANOTHERSHITE]

THIS IS FIXED BY NOW RIGHT?? I JUST TRIED IT AND IT DOESN'T WORK SO I'M HOPING ITS FIXED AND I'M NOT JUST FUMBLING SOMETHING

[@ANOTHERSHITE]

nevermind...super bowl mode fumbles

[@Dreams_On_the_way]

after connected with kali a windows machine, what are the commands i can run for showing data of victim machine, if i start anything that thing opens in victim machine, show how can I use victim's computer

[@cowbe0x004]

When you copy that malicious hta file to the exe, it becomes gibberish. Is there any way to extract the hta?

[@FuzzerHash]

Jhon ever with nice content

[@theinfosecguy]

Amazed!

[@iamwitchergeraltofrivia9670]

More malware super good

[@Ahmed95406]

I Enjoyed ,you are genius I love you thank you very much 🤩😍😍

[@concepcionwilson5815]

Please help, If I try this with a .lnk file extension with the copy command I get an error saying that the system can not find the file, but if I try it with a .png or any other type file it sees it. PLEASE HELP 6 hours in!!!🤔🥴

[@IverGameplays]

N O I I C E ! ! 👏👏👍🏼👍🏼

[@ollyjxrvis9501]

I dont see the need for having the .lnk data in the start of the .lnk file, if we are just going to change the target anyway, why not just write a hta file, change the file extention to .lnk and do the same. Wondering if I'm missing something here

[@mervstar]

To keep things at stealthy as possible and still be functional. A .lnk file will fly under the radar for most users, especially if it looks like it's for an application you have installed. A random .hta file showing up anywhere would raise a few alarm bells or at least a furrowed eyebrow or two. With a .lnk file, you can set the properties of it like icon etc. to obscure its true function even further. A .hta file that's been renamed to a .lnk file will just give an error when someone tries to run it because windows will treat it like a .lnk file.

[@iWhacko]

if it's renamed to .lnk windows will treat it as a link and give you an error because it doesn't know how to interpret the data as a .lnk file. you specify how to run it using mshta.

[@hehefer]

so if .ink extension is a doubftul file meaning can it be mwalre bro

[@sendlocation8476]

What a good rat program and where to get?

[@radenadhiyaksa4663]

can you embed with .pdf file ?

[@TopG_Crypto]

I was hacked by this same method

[@gratisgratos]

I have been here 5 minutes since the video has been uploaded

[@0oNoiseo0]

Love the out of the box thinking in an easy to follow process

[@apekatt2007]

Can it run calc.exe? Yes, it can! ❤

[@xCheddarB0b42x]

🍔

[@eno88]

Polyglot is a pretty senseless way to call it.. conglomerate? heck, even alloy makes more sense.

[@carsonjamesiv2512]

INTERESTING!

[@for14556]

Very nice

[@anak_sains_yang_toxic]

Goooooooooooooooooooood 🎉

[@JohnSmith-jc7dk]

You can't get away with this.

[@XtecherPY]

Regular Hackers: Just open this file! John: Just open google chrome

[@hama502]

vbscript soon deprecated

[@MADhatter_AIM]

but MS just have added full blown python-support into ms-excel , gotta luv MS for adding some additional attack-vectors.

[@victorwambugu1115]

I've followed the instructions to the latter and it doesn't seem to work on the reverse shell part

[@FriedMonkey362]

​@@MADhatter_AIMdoest the python run on their servers, and only available for paying people

[@MrHasooooni]

how to make every video fun and intersting ??? it is easy just be john hammond !

[@the_yugandharr]

Interesting!!!

[@eikichi9050]

excuse me Mr. Hammond, i have a question. If you have windows defender running, this lnk "malware" file can bypass it or it will be blocked when executed?

[@iWhacko]

it can run, but depending on the script it might be detected. the standard metasploit payload will most likely be detected.

[@Eldoradotrueshot]

i just deleted all my shortcuts.... thanks :)

[@adfreeviewer9005]

Too late , lol

[@bkcommando6969]

plss help me my microsoft account is hacked plss reply

[@E-Power2023]

Now defender is detected ink shortcut to run any comments,...

[@ReligionAndMaterialismDebunked]

Early crew. :3

[@hydrogennetwork]

i made a shortcut to run a bat that would run a powershell script that would run a script embedded in a image

[@f.andersen3824]

Thank you, now I see those little fellars with different eyes. 😂

[@timecop1983Two]

You should help Ukraine with your cyber skills! I learned some of my most advanced skills here

[@PSL1969]

Nice! :)

[@Mrroot-m4f]

i enjoy it

[@elssarace3957]

Sir can you help me to get back my money i got scam

[@Meletion1]

8 minutes I’m in.

[@Mazurizi]

Is this pay what you can training only available in America or something? The lowest you can pay is $295 - I don’t understand why it is called pay what you can, when it isn’t pay what you can at all.

[@nordgaren2358]

Did you click on the course and actually go through until you choose a payment option?

[@xCheddarB0b42x]

That price is for access to their Cyber Range. You can buy the 16 hour SOC Core course for $25, but you don't get access to their infrastructure nor their labs running on there. Honestly, $295 for access to an industry leader Cyber Range is worth it.

[@apekatt2007]

@@xCheddarB0b42x His point was that the slogan is misleading, not that it is expensive

[@iWhacko]

im in europe, if you go through the registration process at the last option you can choose how much to pay. It used to be free, but I think they changed it to 25usd so they get less no-shows, since people who pay nothing don't lose anything by not showing up.

[@nordgaren2358]

@@apekatt2007 it's not, though

[@SpektWez]

Creative tutorial

[@hierarki]

wtf how

[@HimonRoy-ns2xp]

Hi

[@josephseed3393]

Yooo

[@alientec258]

very cool shit ;)

[@SixMaverick]

Eh

[@anonymousking9797]

I'm first ❤😂

[@Blooded2024]

12th comment

[@MiuraUY]

Nice, kinda cringe seeing this here, but nice

[@lokeshb9025]

first

[@abekomi]

you lost me a little😅

[@anounTT]

32nd

[@cautious-agency8]

I’ll pay u 1000$ if u can code me a program that force ops on a Minecraft server lol

[@pmcforever9686]

third

[@activatewindows7415]

ur channels dying :(

[@activatewindows7415]

@@lumikarhuhuh really? isn't John supposed to be a well respected member of the ethical hacking community? or at lest on youtube?

[@cexeodus]

october to end of december is always pretty busy for anyone in cs field. the man can take a break i think. 😂 "cHaNnEl DyInG" naw man thats not gonna happen

[@KiroKiro-ko3kb]

What is the other content creator​@@lumikarhu

[@that_guy1211]

lmao, who tf even uses desktop shortcutes when you can just WindowsKey search every program? Or just pin it to the taskbar LOL

[@jahguideadnan3784]

Talking much and actually doing less 😂

[@komodiasupport2547]

U can talk about a userland rootkit named r77 rootkit in windows,it is fileless rootkit

[@Shabbyy.]

Hello guys I went to support me l. Software open , file type "pksz "