PixelCryptor: Hiding Executables Inside Images

PixelCryptor is a Django app that lets you embed an executable file inside an image. Upload both files, it concatenates them with a delimiter, and stores the result on Azure Blob Storage. You can later extract the original files back out. How It Works The approach is deliberately simple: append the executable bytes to the image bytes with a known delimiter between them. def obfuscate_images(image_blob_name, executable_blob_name): image_data = image_blob_client.download_blob().readall() executable_data = executable_blob_client.download_blob().readall() delimiter = b"---EXECUTABLE_BOUNDARY---" obfuscated_data = image_data + delimiter + executable_data obfuscated_blob_client.upload_blob(obfuscated_data, overwrite=True) Image formats like JPEG and PNG store their data length in headers. Most viewers stop reading at the image data boundary, so the appended executable bytes are invisible when you open the file as an image. Deobfuscation finds the delimiter and splits the bytes back apart. ...

February 16, 2025 · 2 min · Muhammad Hassan Raza