(Aug 18, 2021 05:15 PM)Dyne Wrote:  You won't on public forums or message boards.
There are hundreds of little scams and 'live tests' to do with silent doc/xls exploits.


I would recommend you research this topic heavily. For office 2019, the only workable RCE exploit was CVE-2020-0980, which was patched immediately by Microsoft. This, still, isnt for sale publically.

Many scammers will attempt to sell you on a live demo on a host machine where they are "building" the .doc on your desktop/box, executing it and showing you that it 'works'. What they are actually doing is executing their own RAT bound,  download and executing your RAT stub after executing the "document" to give the illusion that it was the document that infected the host device. The last CVE for public sale was CVE-2017 and CVE-2018 which are long out of relevance especially for attaching directly to e-mail.

Always ensure you exactly what you're buying and how to utilize or test it.


99% of the time when people attempt to lure you offsite for something like this, perhaps to discord or the like, they will attempt to scam you. Always deal with HF contacts if you meet them on HF for security. And, of course, a middleman.