Hello, i have a .doc exploit from a friend coded in Phython and i dont understand enithing, please help
Thanks Jonas🤝
Thanks Jonas🤝
|
Python
Need a Phython "Expert" |
Jun 2, 2016 01:44 PM
(This post was last modified: Jun 2, 2016 01:45 PM by SIM-1866423.)
Let me guess its CVE2012 RTF or CVE2010.And your vague question actually "how can i refud this script", right?
ps : you dont need any "Phython Expert" coz its just create a file.  
Do you know what python does in this scenario?
I'll give you an example. I recently wrote a crack for cobalt strike. I just had to replace a few functions in a compiled .class file. When I was done, I took the class file, compressed it with bzip, and encoded it with base64 so I can store it in my bash script... this is the result PHP Code Now, it is true that this is actually bash scripting... however, if you decode/decompress that with something like this, you can open it up in a java decompiler and find out that it's actually a class file: PHP Code To reiterate, it's a FUCKING JAVA CLASS FILE encoded in base64, stored in a bash script. The only thing bash is doing in delivering the data. If the crack stopped working, you wouldn't ask for a fucking 'byash' scripting expert. You wouldn't ask for a base64 expert. You would ask a fucking java programmer because that's what the payload is written in... Python is nothing but the syringe. It's the delivery method. It's NOT the god damn exploit... Fucking christ. How many more of these threads are there going to be? SRPP Discord Server
I am a professional network/cloud security architect. My Old Tutorials |
|
|
