+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: any .doc or .jpg exploit? (/showthread.php?tid=5219794)
any .doc or .jpg exploit? - ๖ۣۜDødøsky - Mar 29, 2016
do you guys have any .doc or .jpg exploit method?
i don't really care if its not FUD
thanks in advance
* - Alex Belarto - Mar 29, 2016
You just have to search on dedicated exploits site, like: www[dont]exploit-db[dont]com
Good Luck 👍
* - Armada - Mar 29, 2016
Can not infect image files bro.
* - Ozgin - Mar 29, 2016
https://www.youtube.com/results?search_query=infect+word+files
It can be done with word and excel. It's a little sketch cuz when they open it up it says that they need to accept some mode if I recall. But With a lil social persuading. Yknow like say you wrote it on mac or an older version of word so it may be that, etc.
* - Armada - Mar 29, 2016
(Mar 29, 2016 05:38 PM)Ozgin Wrote: https://www.youtube.com/results?search_query=infect+word+files
It can be done with word and excel. It's a little sketch cuz when they open it up it says that they need to accept some mode if I recall. But With a lil social persuading. Yknow like say you wrote it on mac or an older version of word so it may be that, etc.
They have to enable and accept use of Macros, with a big fat security warning.
Not really worth it, some Silent Doc exploits in python exist, but apparently they only work up until 2010 version. I had one that supposidly worked for up till 2016, but fucked if we could get it working correctly.
* - Stag - Mar 29, 2016
When you open up the word file the user is promoted with, this document has macros would you like to enable, the macro is the exploit if they simply click no it does not work, and you can not avaid this
Armanda beat me too it ;)
* - Ozgin - Mar 29, 2016
(Mar 29, 2016 05:40 PM)Armada Wrote: They have to enable and accept use of Macros, with a big fat security warning.
Not really worth it, some Silent Doc exploits in python exist, but apparently they only work up until 2010 version. I had one that supposidly worked for up till 2016, but fucked if we could get it working correctly.
mmmmm wasn't sure what it was, that is too sketch. Thanks for info!