Exif Smuggling
Summary
Exif Smuggling is a proof-of-concept attack that hides an executable payload inside a JPG's Exif data, enabling passive download via browser image caching without additional network requests.
View Cached Full Text
Cached at: 06/10/26, 12:22 AM
signalblur/exifsmugglingpoc
Source: https://github.com/signalblur/exifsmugglingpoc
Exif Smuggling
A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG’s Exif data. As a result, image caching (such as that of a Web Browser) can be used to passively download the payload.
As a result, the example loader (chrome_poc.ps1) does not need to make any internet requests to fetch the second stage payload.
Instead, it simply extracts it from the Chrome browser’s cache.
For full details see: https://malwaretech.com/2025/10/exif-smuggling
Example Usage
Convert PowerShell Loader to ClickFix Command
python3 build_clickfix_cmd.py --input-file chrome_poc.ps1 --output-file encoded_command.txt --fake-path "C:\test\doc.txt"
Embed payload dll inside arbitrary JPG
python3 exif_smuggling.py --input-file image.jpg --output-file payload.jpg --payload hello_world.dll
Example Phishing page
www/index.html
Similar Articles
Inside Ghostcommit: How Malicious PNGs Bypass AI Code Reviewers
Ghostcommit is a novel supply chain exploit that uses malicious PNG images containing text instructions to bypass AI code reviewers, leading to data exfiltration from developer environments.
HEIF Heist
HEIF Heist is a class of security vulnerabilities in image parsers like libheif that allow remote code execution and data exposure through crafted HEIF, HEIC, or AVIF images, affecting major services such as OpenAI, Slack, and GitHub Enterprise.
EX-ARRR: Sailing the 0-click Seas
A security researcher describes finding a zero-click heap overflow vulnerability in Apple's EXR file parser, enabling remote compromise of iOS devices via iMessage without any user interaction.
'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
Researchers demonstrate a new prompt injection attack where malicious instructions hidden in images bypass AI code reviewers and cause coding agents to leak repository secrets.
Proof of Capture: Apple Reference Image, but open source and using steganography
The article introduces an open-source project called Proof of Capture, which uses steganography and a cryptographic chip to prove photos are camera-captured, offering an alternative to Apple's Reference Image feature.