GitHub - signalblur/exifsmugglingpoc: A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload

▤ Summary

This post describes a proof-of-concept attack that hides an executable payload inside JPEG Exif data. It shows how browser caching can quietly download a second-stage payload without the loader making any direct internet request. The example uses Chrome cache extraction to retrieve the payload locally. This makes the technique relevant to defenders tracking new malware delivery and persistence methods.

▦ Linked Companies

Semmle

$1M to $5M