+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: .DOC exploit building (/showthread.php?tid=6140618)
.DOC exploit building - shell33 - Feb 18, 2021
Can anyone here help with how to use an existing CVE combined with VBA code/Macros to build malicious .DOC document? Would also need to know how to obfuscate code so it’s not detected
RE: .DOC exploit building - guardian - Feb 18, 2021
You can find all of it online. Creating a .docm backdoor is easy, making it FUD is the tricky part. If you only want .doc you will need an exploit. If there is no public code on exploit-db or the like, you will have to exploit it on your own, which is pretty hard.
RE: .DOC exploit building - zelus - Feb 22, 2021
(Feb 18, 2021 08:22 AM)guardian Wrote: You can find all of it online. Creating a .docm backdoor is easy, making it FUD is the tricky part. If you only want .doc you will need an exploit. If there is no public code on exploit-db or the like, you will have to exploit it on your own, which is pretty hard.
Do you by any chance know how to make it FUD?
RE: .DOC exploit building - hombregordo - Feb 26, 2021
(Feb 22, 2021 11:45 AM)zelus Wrote: Do you by any chance know how to make it FUD?
Google 'VBA Purging' and first page will show an article from a well known red team/ programmer with a tool on GitHub called 'OfficePurge'.
The old red team method was VBA stomping but many threat actors hv moved onto purging so this tool simulates the same attack so that companies can test it and defend themselves/update yara rules.
Many other blog posts there as well that will help you write / understand VBA, shell code , etc.
RE: .DOC exploit building - shell33 - Mar 1, 2021
(Feb 18, 2021 08:22 AM)guardian Wrote: You can find all of it online. Creating a .docm backdoor is easy, making it FUD is the tricky part. If you only want .doc you will need an exploit. If there is no public code on exploit-db or the like, you will have to exploit it on your own, which is pretty hard.
Hey thanks a lot for the very helpful reply and Instructions. Much appreciated. So you’re saying to use the .docm format and use that Threat Actors page + VBA purging to make the .docm backdoor FUD?
RE: .DOC exploit building - Super - Mar 2, 2021
A private exe-to-doc exploit worth $2,100 was leaked back in December 2020. It's patched now, but you can still target outdated versions of MS word.
Link: https://github.com/bdunlap9/.Exe-to-.Doc-Exploit
Enjoy ✌
RE: .DOC exploit building - xrahitelvip - Mar 3, 2021
RE: .DOC exploit building - Spidyhunt3r Offical - Mar 4, 2021
im have fully fud doc builder
RE: .DOC exploit building - Sitrep - Mar 5, 2021
You have a pretty new and good guide here for that, try it out in you own lab and learn!
https://levelup.gitconnected.com/ethical-hacking-part-13-office-macro-attacks-3a8a0cad14b7?gi=a042967f5893