# backdoorppt

**Repository Path**: newlan/backdoorppt

## Basic Information

- **Project Name**: backdoorppt
- **Description**: transform your payload.exe into one fake word doc (.ppt)
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 1
- **Created**: 2022-01-22
- **Last Updated**: 2022-01-22

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

[![Version](https://img.shields.io/badge/backdoorppt-1.7-brightgreen.svg?maxAge=259200)]()
[![Stage](https://img.shields.io/badge/Release-Stable-brightgreen.svg)]()
[![Build](https://img.shields.io/badge/Supported_OS-kali,Ubuntu,Mint-blue.svg)]()



# backdoorppt - 'Office spoof extensions tool'

    Version release: v1.7-Stable
    Author: pedro ubuntu  [ r00t-3xp10it ]
    Distros Supported: Linux Kali, Ubuntu, Mint
    Suspicious-Shell-Activity© (SSA) RedTeam develop @2017

![backdoorppt](http://i.cubeupload.com/2JJ2IA.png)

<br />

## Transform your payload.exe into one fake word doc (.ppt)

    Simple script that allow users to add a ms-word icon to one
    existing executable.exe (using resource-hacker as backend appl)
    and a ruby one-liner command that will hidde the .exe extension
    and add the word doc .ppt extension to the end of the file name.


## Spoof extension methods

    backdoorppt tool uses 2 diferent extension spoof methods:
    'Right to Left Override' & 'Hide Extensions for Known File Types'
    Edit the 'settings' file to chose what method should be used..

    cd backdoorppt && nano settings
![backdoorppt](http://i.cubeupload.com/ldKWDd.png)

## Dependencies (backend applications required)

    xterm, wine, ruby, ResourceHacker(wine)

    'backdoorppt script will work on wine 32 or 64 bits'
    'it also installs ResourceHacker under .../.wine/Program Files/.. directorys'

## Tool Limitations

    1º - backdoorppt only supports windows binarys to be transformed (.exe -> .ppt)
    2º - backdoorppt requires ResourceHacker installed (wine) to change the icons
    3º - backdoorppt present you 6 available diferent icons (.ico) to chose from
    4º - backdoorppt does not build real ms-word doc files, but it will transform
         your payload.exe to look like one word doc file (social engineering).


<br /><br />

## Backdoorppt working (Kali distros)
![backdoorppt](http://i.cubeupload.com/ueWu5R.png)

## transformed files on-target system (windows)
![backdoorppt](http://i.cubeupload.com/Hkv0jp.jpeg)

<br /><br />

## Final notes

    Target user thinks they are opening a word document file,
    but in fact they are executing one binary payload insted.

<br />



## Video tutorials:

backdoorppt: https://www.youtube.com/watch?v=k4UJW4p1E3w&t=1s

<br />

### Special thanks:
**@Damon Mohammadbagher** | **Article: goo.gl/hKHesk**