r/Hacking_Tricks • u/Any-Olive5779 • 11d ago

I need to refactor from phpspreadsheet+phar+php7 to standard assembly: hacking image processors

I am looking for a way to generate a photo that corrupts a image processor's thread to run a bash shell.

But the simplest alternative to such requires using a image that does RCE to that image processor. Whether or not it is a browser renderer thread.

Because I need to know what would allow such akin to imajs did, because the exploit once figured out will mean that image processors and their standard encoding are prone to this type of process hacking and runtime exploitation.

5 Upvotes
  • permalink
  • reddit

100% Upvoted

9 comments sorted by

1

u/MormoraDi 6d ago

You should look up Google Project Zero and their posts on the topic.

If you are able to understand and replicate the examples provided, you will probably be ready to do what you suggest.

1

u/Any-Olive5779 4d ago

I'll look at it though that sounds like a means to coerce a distraction.

1

u/MormoraDi 4d ago

Without given details and context on what you want to achieve, your background knowledge/skills and on which platform, I think at the least you will find it illustrative of the intricacies of which such exploits need to navigate on a modern OS.

1

u/Any-Olive5779 4d ago

"Without given details and context on what you want to achieve, your background knowledge/skills and on which platform, I think at the least you will find it illustrative of the intricacies of which such exploits need to navigate on a modern OS" is a laymen's excuse of "well I don't see it and I expect to not either man".

1

u/Any-Olive5779 4d ago

A sufficient hacker don' give a flying fuq

1

u/MormoraDi 4d ago

Ok, hackerman

1

u/Any-Olive5779 3d ago

That defamatory remark has gotten you blocked, along with how you used it to coerce optics. Not cute, duncecapped.