How a Hacker Could Create a Trojan PDF for Macs Using AppleScript, Part 1

Creating a Stager for a Trojanized PDF to Backdoor Macs

Cyber Weapons Lab, Episode 145 (Teaser)

Most people have been warned at least once that they should never download and open a file received online from an unknown sender. But how bad could it be to open a simple PDF? Today on Cyber Weapons Lab, we'll cover Part 1 of a Tokyoneon's attack, which demonstrates just how badly one could compromise their system when clicking on a malicious file. Using AppleScript, we'll show you how a hacker or pentester could create a trojanized PDF file that would allow them to backdoor into any macOS system.

Follow Null Byte on:

[MrC-Hacking]

If you stare deeply into his eyes he has installed a backdoor into your soul

[fares_haoua]

hey thank you for your helpful videos
my question is why when I run the command "./empire" it shows me an error msg "sqlite3.0perationalError: attempt to write a readonly database " ???

[papikabron]

Is it possible to bind a .bat file with a VBScript so the batch file runs thru it to a file like a document or image so that when somebody clicks it the .bat doesn’t show the windows terminal? I know you can bind a .bat to an image but can you include the VBScript on it and run the .bat thru it??

[younesmohssen]

Hi can you make a tutorial on how to encode your own payload? I’m not talking about using a tool that does the work for you. I’m more interested in encoding it myself. If anyone knows please let me know. Or if Cody can make a video on it that would be awesome

[facelessltd]

Hey @Null Byte, I followed every single instructions in the video you posted on your website regarding this topic. When I launch the applescript from my Mac OS X, the listener on the Linux platform did not receive any signal as you've demonstrated in your video. Can you help me on this or provide me with your email to solve this issue?

[surftijmen]

Hi @NullByte, do you know how to open/ hack a locked PDF file on Mac?

[sieraechoviktoruniformmike]

What are the names of the books behind you?

[menez]

What is a good tool to investigate a suspect PDF like this without running the file?

[balzankrp]

What if it detected by AV
Wolud possible if we make the pdf or any file into FUD payloads

[JohnDoe-mhvd]

How to use MailDiya for email bombing? I found it in your telegram group but I am unable to use it.

[Abdullah_Khaled]

The website doesn't work, I'm from Egypt is it blocked here?

[roshanjacobxavier]

Can a phone's security code or pattern be bypasses to get into the phone... can you pls make a video

[sarcasmking]

Can you make a Tutorial on how to create a Backdoor for windows 10 Operating Systems Please?

[sarath_sajan]

I am not expert in private/unlisted videos but I have this doubt, why don't you upload your full tutorial videos as a unlisted/private video on YouTube and then make a short non-violating video as a promo with the link to the unlisted/private video in the description. Will YouTube also consider unlisted/private videos as rule violation for striking/flagging

[tbonenidhin]

Can this be used on Android devices, and how would one check if the Android device has been hijacked?

[johnnymann]

Can u do a short video of how to do mdk3 in kali

[wehhhdinga]

hi while i was testing the trojan on my mac and attacked it using the usemodule osx/screen_shot it was saying "can only concatenate str (not "bytes") to str" can anyone help me on this

[darven]

Hey bro
Can we hide Trojan in android PDF
Can you please help me out

[faisalmushtaq]

Bro can we use this application for android if not make a video to be done same attack to create backdoor for android, as the script runs by clicking on the app or picture something like that, and the restricted parts I will check it on your website,
I aslo have a suggestion for you
Please please please start beginner level courses in sequence that the people who want to learn hacking must gain initial knowledge like me and I know the policy of youtube that some parts are restricted, we will check them on your website, please start beginner level courses so we can understand your all videos on YouTube, I hope you will pay heed to my request or suggestion, I will be thankful to you for that

[supergamered]

Do u know how to create a chrome cookie logger?