RTLO Right To Left Hack Demonstration

preview_player
Показать описание
This short video shows how to use the Right To Left (RTL) hack to swap change a file extension using nothing more than the Windows Character Map. Right To Left Override is a very dangerous feature that is being widely used by creators of malware and to my knowledge, there is no filtering or GPO or software to stop it.

Рекомендации по теме
Комментарии
Автор

‮it is actually reversed! I love this character.

Mr.Tree
Автор

Carefully analyze the file name. Windows Explorer cannot detect them normally(If you make changes to a txt document with a RTLO, the RTLO shows up as ?), but Command Prompt can. You can also just look at the file carefully. If it has EXE or any other extension capable of damaging foreign items in it's name, be careful.

jessveness
Автор

‮‮im using it rn, u can check the characters, its so cool ngl

echofallenn
Автор

Now name displays with fake extension, but icon is chosen based on real extensioon, so [RTLO]fdp.exe looks like exe.pdf and shows icon of exe file.

PanDiaxik
Автор

My Windows is 7 and I can't find this character (u+202, e). Is it soled in Win7?

rasoulkhoshravan