The LEGENDARY line "For educational purposes only"....💀😎🥃
@rakiburshuvo09
4 ай бұрын
and we use it to spy unknown by saying educational purposes only 💀💀
@opinysamuelleo3457
4 ай бұрын
@@rakiburshuvo09 of course they will tell you to the main purposes, but we must agree that is really cool.
@walakiraismail3907
4 ай бұрын
Very legendary
@Cheez_and_crackers
3 ай бұрын
How to negate all liability
@Noone-ml1me
3 ай бұрын
People who did not heard the epik line: "oh yeahhhh baby its hecking time "
@sasTRproabi
4 ай бұрын
I was scanning the image files with my antivirus and my friend was laughing, now I am gonna send him that video :D
@hollycow8171
4 ай бұрын
only jpg can hold data. not other extension.
@jasp402
3 ай бұрын
I'm afraid it won't detect it anyway. Until you double click it is a compressed file.
@dangerous_tumor3
3 ай бұрын
just turn on show file extensions
@ShellCode-oo2cu
2 ай бұрын
@@hollycow8171 An extension is part of a filename and is often used to identify the file format and associate it with the correct application. The meaning is to identify, an extension such as *.jpg says nothing about the actual file format. A file format is identified beyond doubt on the basis of other characteristics, such as signatures, also known as magic bytes. Every file format can hold data, how else would the whole construct work? To say "only jpg can hold data. not other extension." is completely wrong in every respect.
@RotatingLocomotive
Ай бұрын
@@sasTRproabi By default I think most antiviruses don't scan images. Remember, the sample file in the video is still an executable, not a jpeg
@abandonedcrack
3 ай бұрын
How to identify: if you don't have file extensions enabled, do not open ones that appear with an extension, also scrs and com files are basically executable but com is old.
@Naxxami
3 ай бұрын
The file type whould be show as Application
@linuxtuxvolds5917
Ай бұрын
.scr is old as hell and it's Windows screensavers since they had to package them as executables. It is redundant as nobody uses screensavers anymore; The whole system could use a revamp and get rid of this vulnerable file extension.
@gtr8741
4 ай бұрын
When they say "educational purposes only" you know they ain't gon bs around 💯🔥
@flash_gang
5 ай бұрын
This is cool but nobody would actually fall for this because windows will have that pop up saying that it’s an untrusted executable
@eyezikandexploits
5 ай бұрын
Man youd be surprised, someone young would and with social engineering too its game over. SWIM used to go into minecraft servers have a friend who (didnt know me) but would "downlod" my rat and vouch for it to have worked(some minecraft mod or a hack for it, even went as far as to make them in java) and thats all itd take for people to be trucked
@sysk3y-prod771
5 ай бұрын
Simple fix… obfuscation
@flash_gang
5 ай бұрын
@@sysk3y-prod771How would obfuscation fix that? It would still give you a popup before it runs telling you its an executable not an image.
@giftmoyo9957
5 ай бұрын
I got hack with this same trick three days ago it made me erase all data from my PC. Thank God I realised quickly that I was being hacked otherwise the attacker could have gone with my credentials. The attacker embedded the code in unsuspicious link under a video tutorial which I clicked and that was all it disabled everything on my computer.
@flash_gang
5 ай бұрын
@@sysk3y-prod771I thought I had responded to this, I think my other comment got auto flagged for some reason. Obfuscation would not fix the issue of a gui popping up before you run the executable that tells you its an executable not an image.
@OGmolton1
3 ай бұрын
its scary how insecure windows is, thanks for sharing
@menreikichan8291
3 ай бұрын
Won’t this be detected by windows defender?
@timmmm5012
3 ай бұрын
@@menreikichan8291it should be but sometimes people turn it off for some reason
@softwaremkxvii
3 ай бұрын
@@menreikichan8291not allways
@kaveeshathilakarathna8063
3 ай бұрын
@@menreikichan8291 yes this will detect by windows defender that is why we should not disable windows defender in any case.
@Viylne
3 ай бұрын
Not insecure man if you know how to handle the OS. differently people with less knowledge with system will use computer just like gaming or working. but I am experiencing about OS and a bit more about coding. so I have a programs and some Un official tweaks for my windows. so my system so far so good and virus always detected even the services virus background 😁
@mythbasters3119
4 ай бұрын
I love Z security for this reason . Their video is well explained and organized and so easy to understand the process ❤
@painandsuffer
3 ай бұрын
For one trillion years I've been trapped in my own decaying dimension, waiting for a new universe to call my own.
@MR.9999MILLION
5 ай бұрын
Many youtubers says it's an educational vdieo but it's educating and updating an hacker for more features 😂😂 like here if you like it😂😂
@sarowarhosen003
5 ай бұрын
if your know you know
@stephenluttrell8958
5 ай бұрын
This little trick has been around for years. It’s not teaching anyone anything new and there are plenty of ways to defend it. But that sword swings both ways. It may teach some new hackers something, but it also teaches everyone else what to look out for.
@Klebedose95
4 ай бұрын
I always look for the extension to be not ".exe" ... but the reverse character is new to me. So now I'll always also pay attention to filenames like "[filename] exe. [fileending]" So this would also work if you send .pdf files to other people...
@NikolaTomic
5 ай бұрын
Will it execute if I right-click on file to go to properties but I already have XNView MP with shell extension to show me image preview in explorer?
@keto4life197
4 ай бұрын
With a keygen so You got all the virus You need
@Muziek37414
5 ай бұрын
Instead of turning off windows defender, you could add a exclusive folder or zone where the AV Wil not scan. I know some infostealers use this method
@Compute_and_Hack
5 ай бұрын
do you mean the victims PC defender must be turned off so that the connection can pass?
@Muziek37414
5 ай бұрын
@@Compute_and_Hack no defender can still be on and active. If you add an exclution zone you can run code without it being scanned by defender and I think even amsi
@Compute_and_Hack
4 ай бұрын
@@Muziek37414 Thanks
@similiciousprogrammer1109
4 ай бұрын
I want to target android Is it same for android ?
@robertsteve5175
4 ай бұрын
@@Muziek37414 how please
@stanislavsmetanin1307
5 ай бұрын
Wait!! After the user opening you should close the picture, not going to discord, as user will not stare at the BMW forever. :)
@-zarex-6847
3 ай бұрын
can u only Control if the picture is open? then Its useless lol
@-zarex-6847
3 ай бұрын
@chattf is that possible on mobile too, like whne u install apk? I never openes photos on mobile but with anything else like the base Game apk is actually this Virus?
@gokulmahesh5757
4 ай бұрын
brilliant steganography technique
@tentimesful
3 ай бұрын
if an image is hacker thing and your image opener makes them hack you get rid of it as a image program reads out the image colors at their positions and voila no hacking on to you, and this goes also for your videos,,,
@octopilius
Ай бұрын
i write !help but nothing works
@IamLookingforWoody_________786
4 ай бұрын
Thanks for guiding us for using VMware machine before practicing this work.
@hollycow8171
4 ай бұрын
how old are you tbh. 😮
@robinsonpk5867
3 ай бұрын
Its not working right now , fixed by discord. Right?
@cstyt5443
3 ай бұрын
@@robinsonpk5867is it working now
@TrippyMango
5 ай бұрын
It might work until you have file extensions enabled or download it from a internet browser, there it will say "image.jpg.exe"
@hithammelhem2656
4 ай бұрын
thank you as a user how to identify such manipulated image
@mudassarmuhammad776
4 ай бұрын
How to remove it from the machine ???? this should also be told in the video....
@jonda_mc
4 ай бұрын
Just make new one
@RotatingLocomotive
3 ай бұрын
The fact that the name of these malicious files always end with "exe" can be helpful to spot them
@user-dk7os6hp4z
2 ай бұрын
Ty
@RotatingLocomotive
2 ай бұрын
@@user-dk7os6hp4z You're welcome bro
@madly7010
Ай бұрын
@@RotatingLocomotive that literally doesnt help. + they dont always end with .exe bud
@RotatingLocomotive
Ай бұрын
@@madly7010They do bro. The trick is using a character so that the name will be written in reverse, so an exe file will always have "exe" at end before the fake extension
@madly7010
Ай бұрын
@@RotatingLocomotive but its not always exe at the end bud.
@attageledek6836
3 ай бұрын
This technique is actually very old, I knew about it in the 2000s, but before that no one discussed this matter
@LeftoverAtoms
3 ай бұрын
Why aren't file extensions enabled by default? It just makes sense...
@frezerfiseha1553
5 ай бұрын
It's been ages men😢
@108mohanbhole9
Ай бұрын
Is it works now or not
@donjohnson6063
3 ай бұрын
I love these , I like to open the exe in ida pro get the token and take control over the bot/ channel it is. Noticing people use either discord or telegrams as a command and control center , the biggest mistake is hard coding api or keys in the exe
@cocococodrilo
5 ай бұрын
As usual this kind of video don't make sense as Windows defender will stop the program before executing ....
@lolononojay9010
5 ай бұрын
Use a crypter
@choco-yt
5 ай бұрын
@@lolononojay9010how
@naseertarar7309
5 ай бұрын
which crypter should we use? @@lolononojay9010
@craigdaniels1492
4 ай бұрын
Won't Windows defender catch this if they click on the image??
@AndrewDawson-c4u
Ай бұрын
yes and noooooooooooooooooooooo fuck
@zamal7611
5 ай бұрын
yeah, it's working but windows firewall detected (can u make video for win firewall to avoid malware in image)
@spinnerlive
4 ай бұрын
Bro it took me few seconds to realize that it’s you. Looking great in beard.
@DirkArnez
3 ай бұрын
.exe is too beginner that i automatically ignore when i enable extension in Windows Explorer. I prefer to have virus in an image file that i cannot complain
@Soth0w76
4 ай бұрын
When I clicked it then: "Oh no! You have no power here" Operating System: Arch Linux BTW
@RezzaiFN9
3 ай бұрын
When i open up the script with the foto its says windows cannot find backdoor.exe make sure you typed the name correctly And then try again
@Induwara-Perera
3 ай бұрын
you have to add the correct name of the exe file created with builder app or rename that to backdoor.exe. when u creating zip file use the correct name of it not the name in the video.
@Induwara-Perera
3 ай бұрын
btw i tried the whole steps correctly unfortunately it says this app dosent support on my pc and i don't have any other device to test it😒, please let me know if it works for u.
@technicalmaster-mind
4 ай бұрын
Thank you
@mihaelkYeah
3 ай бұрын
This hugely complex security exploit can be easily avoided in any operating system if you just DON'T HIDE EXTENSIONS FOR KNOWN FILE TYPES
@Gaming_Squad485
3 ай бұрын
im using clinet built and it keeps telling me windows cant fijd this it opens the image but dosent make it execute
@fimmytom854
4 ай бұрын
This video is for "educational only" yeah we know the truth people who say that wants us to know how to hack & stuff.
@ProfChemeng3
5 ай бұрын
Ill try this on you😂
@HackManJay
2 ай бұрын
I was curious but then I forgot I use linux
@SuperNickid
3 ай бұрын
@zSecurity: What about emulator does are application.exe but the majority of them are not virus and the reason they are is to make sure the game work when you used the emulation since you need executable file to run the game.
@didyouknowamazingfacts2790
4 ай бұрын
I'm pretty sure most email providers will pick this up as malicious.
@Karmik_bhavya
4 ай бұрын
Yea easily, you need to learn by-passing AV and reverse engineering to make it undetectable.
@Compute_and_Hack
5 ай бұрын
Wow! This has been insightful to me about the trojan. Thanks a lot lot more, very thankful sir... Any way i have a question, will the victim PC always be connected to the server immediately when the victim is connected to the internet, or it will require the user to open the trojan file.
@mebolaw2322
3 ай бұрын
Any ideas/comments on the above question?
@RotatingLocomotive
Ай бұрын
Immediately, it starts with windows
@user-mq4lc2bs1b
4 ай бұрын
super i like it thanks for the valuable information.
@DiverseInBits
2 ай бұрын
Ah yes. The ultimate excuse. “For educational purposes only”
@Fevirre
3 ай бұрын
What's funny if you scan the virus on triage, it can log the bot's token the attacker is using and it can be used to login with a discord bot client and screw up their current operation Basically sending a good dose of karma to the attacker
@FurtzTvWer
Ай бұрын
The bit starts and creates the session but no commands works
@sus-rh6tw
3 ай бұрын
me with image extensions turned on:
@PatrickCreations
3 ай бұрын
My brother is going to have some troubble finding this one 😂
@Gaming_And_Creativity
4 ай бұрын
Once the hack is done, I have the information about the victim machine so now my question is will the firewall be closed on the victim machine or is there nothing to do with it...?
@chudchadanstud
3 ай бұрын
Downloading a tool that will do all the work is kinda pointless. I thought you where gonna go through the theory.
@madly7010
Ай бұрын
pointless?
@chudchadanstud
Ай бұрын
@@madly7010 Yes pointless. It's just script kiddy stuff. You won't even know if that script will backfire on you. Remember to teach a man how to fish, don't give him one.
@madly7010
Ай бұрын
@@chudchadanstud I agree with everything, but its not pointless. It's teaching basics of "hacking", and we all start somewhere.
@lowspender147
2 ай бұрын
I always change the settings to show the files extension and show the hidden and protected windows files since the age of windows XP, so clickbait won't work , why don't they make these setting default? Hiding files extension will just prevent people from learning some simple thing
@knowit1m
4 ай бұрын
Educational purposes only ☠️
@Johnny_200
3 ай бұрын
It's still educational if you use it to hack your university for a Computer Science degree
@AbubakerMahmoudshangab
4 ай бұрын
Perfect zsecurity guys
@xd22fahadsameershaikh43
2 ай бұрын
Antivirus in the cornor laughing
@ar12tech11
Ай бұрын
For window 7 not working
@user-zi5hp3ih7j
4 ай бұрын
during my intern i was victim on this , the usb is encrypted
@Noobygamy
3 ай бұрын
im gonna make this and put it on my friends and rickroll them 💀
@cily-AdoptMe
Ай бұрын
that generated url does NOT appear
@Phonkloversonly
2 ай бұрын
My virtual box is not working 😢
@shahul_xh
4 ай бұрын
Flipkart is very scandalous
@sgct89
4 ай бұрын
Please ask them to keep waiting? I have dial up and it said I've got 8 months left until the image is completely downloaded!
@mxturiol7579
3 ай бұрын
No open discord application
@ranjitkumargouda8970
5 ай бұрын
The biggest lie "This Video is for Educational Purpose Only"!
@kaniala7z
Ай бұрын
It does not work no more?
@virtualheadless4764
5 ай бұрын
Hey what happen if user is offline and then open the file and deleted in offline mode by finding nothing on file Can still we have access
@shadowsalah1484
5 ай бұрын
the backdoor wouldn't be activated at that moment since the file couldn't establish a connection to the attacker's server or execute any malicious code while offline.but once the friend goes back online, if the backdoored image contains executable code or a script that initiates a connection to the attacker's server, the backdoor could potentially execute its malicious payload.
@DeeperSoul
2 ай бұрын
Many softwares like Telegram has auto download what I hate cause so many strangers/scammers messaging you with image messages. You have to disable downloads settings after setup or every installation but for the safety that settings must be disabled as default!
@nildesperandum2034
3 ай бұрын
WINDOWS DEFENDER LAUGHED THIS !!!
@EthycalHeck
2 ай бұрын
Does it hack phone?
@raffazaver
Ай бұрын
No phones don't have executables they do have other ways but not exactly the same as here
@Zachsnotboard
2 ай бұрын
So the victim needs winrar installed for the sfx to work ?
@barskarakas4927
3 ай бұрын
new fear unlocked Amazing video thanks a lot
@user-ld3oq6jv6l
26 күн бұрын
i can see his camera like video?
@BM-wl2sn
4 ай бұрын
Type of file WEBP (.webp) what this?
@hazratumeriit5374
5 ай бұрын
I think you are the brother of zahid sabih
@owASTA
4 ай бұрын
i think the cons are the space of the file , it can be spotted
@sdafasfF
2 ай бұрын
When will this guy actually teach some valuable information, I am actually surprised on how he is this well known in the security field.
@ENROUTERV3
4 ай бұрын
Know the difference between steganography and evasion
@sgzcw
2 ай бұрын
How can i bypass antivirus
@hermano_adam
4 ай бұрын
but when i want to copie the bot token they say entre the password what is the password plllls
@SirLizardo
4 ай бұрын
its your discord password
@drip547
Ай бұрын
can you drag this picture into discord and it will show as a normal picture?
@Tsu1.
4 ай бұрын
when someone opens it i can only do 2 commands before it just stops working can i have help?
@ShellCode-oo2cu
2 ай бұрын
Which picture? Here an executable file is opened which executes an SFX loader which in turn executes two subprocesses, namely the supposed image and an executable file containing malware. I know that the point is to get the user to open the supposed image by disabling the extension in Windows. Sorry but the headline is more clickbait.
@Dieuxeus
2 ай бұрын
Actually needed to reset my pc because the creator of the discord rat added an hack who stole the administrator on Ur pc on the release.exe 😢
@xenovery
3 ай бұрын
ahora si me aseguro que mi novia virtual sea mia
@EuHistoryMapper
3 ай бұрын
I trolled my friend with this
@Muziek37414
5 ай бұрын
Maybe show to add some persistence? With powershell add on startup
@similiciousprogrammer1109
4 ай бұрын
I want to target android Is it same for android ?
@Conecte_Aqui
5 ай бұрын
How are you managing to keep your KZitem channel covering hacker issues? I had a channel with several hacker-related topics and KZitem, after I had 200 videos, deleted my channel. How can you keep the videos?
@user-pv6mx4wi5x
5 ай бұрын
You forgot to add for educational purposes 😂
@Conecte_Aqui
5 ай бұрын
@@user-pv6mx4wi5x I put it in the video description that it was for educational purposes and even then it didn't allow it until a warning at the beginning of the video
@FurqanHun
5 ай бұрын
You're not supposed to show everything in video, you shouldn't be showing malicious code on the screen and there shouldn't be a real victim 🚶 there's a grey area in the education section and it's pretty easy to cross over it 🚶 btw you can still send a takeout request to google for that channel even if it's terminated and you'll get permission to download your videos
@archerthepitbull883
4 ай бұрын
Hii bro can u teach me how to start hacking...
@darkworld1873
3 ай бұрын
Z security waiting for us to click this video
@kazgaming6571
3 ай бұрын
5:43
@rvxn
Ай бұрын
It can easily be detected by Windows Defender. So, prolly not usable
@trippythegoat9438
3 ай бұрын
I tried this but when i tried to change the name and the picture it came with the same error ''ATR not found''
@BillyDalkes
Ай бұрын
i reconment bitdefender for antivirus and zone alarm for windows mac and maybe lenix
@blackanonymous
3 ай бұрын
yoooo thanks so much
@dev_lani
3 ай бұрын
Will Anti Virus on windows PC detect the backdoor when the user try to download and view it?
@KDR911KO
4 ай бұрын
It's called steganography
@octopilius
Ай бұрын
when u add your bot in dicord it shows bot but mine is showing app
@lancemarchetti8673
4 ай бұрын
Just embed the reversed Base64 of your payload after the 2nd byte in any jpg file. Image parsers will ignore it as Metadata. And your image won't look suspicious. No need for exe renaming tricks.
@Hello-eg8er
4 ай бұрын
How does this work?
@afjelidfjssaf
3 ай бұрын
@@Hello-eg8er i think he means instead of storing the payload inside the exe, just have the code in the exe read the images metadata and parse it
@mmtaqi8448
2 ай бұрын
how you can bypass the windows defender or antivirus when the user click on it ?
@afjelidfjssaf
2 ай бұрын
@@mmtaqi8448 you can't. All files automatically get mark of the web (except ISOs and such)
@political6387
Ай бұрын
Dicord doesnot replay me when i write help or any other command in new session
@TrollTact1cs
20 күн бұрын
same (i think its fixed)
@berkaytuunc
9 күн бұрын
If you find how to solve it please tell me too
@political6387
8 күн бұрын
@@berkaytuunc the solution was i just created the file and didnt compressed it with a photo and directly sent it to the client. it did worked for me.
@berkaytuunc
8 күн бұрын
@@political6387i alteady tried it and its still not working
@Jaafar--06
8 күн бұрын
@@political6387 what do you mean bro please explain
@Oracule-bh5vy
5 ай бұрын
injected PIC, its new for you?
@ANA_Thike
2 ай бұрын
bro no way this is working .... what the hell
@ANA_Thike
2 ай бұрын
nah i just didnt remmember to on real time protection
@endremurti
4 ай бұрын
Any idea for android target setup?
@wawaweewa9159
3 ай бұрын
So why is a file allowed to be listed as jpeg if its an app?
Пікірлер: 442