4.6 KiB
4.6 KiB
Office - Attacks
⚠️ Content of this page has been moved to InternalAllTheThings/redteam/access/office-attacks
- Office Products Features
- Office Default Passwords
- Office Macro execute WinAPI
- Excel
- Word
- DOCM - Metasploit
- DOCM - Download and Execute
- DOCM - Macro Creator
- DOCM - C# converted to Office VBA macro
- DOCM - VBA Wscript
- DOCM - VBA Shell Execute Comment
- DOCM - VBA Spawning via svchost.exe using Scheduled Task
- DCOM - WMI COM functions (VBA AMSI)
- DOCM - winmgmts
- DOCM - Macro Pack - Macro and DDE
- DOCM - BadAssMacros
- DOCM - CACTUSTORCH VBA Module
- DOCM - MMG with Custom DL + Exec
- VBA Obfuscation
- VBA Purging
- VBA AMSI
- VBA - Offensive Security Template
- DOCX - Template Injection
- DOCX - DDE
- References