search

0xdeadbeefJERKY / Office-DDE-Payloads

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
MIT License
633 stars 154 forks source link

trick with IE #3

Closed vah13 closed 7 years ago

vah13 commented 7 years ago

Here I wrote an example how can open docx (and others files) file in target using simple metadata https://vah13.github.io/office-meta/docx.html I think it's another way to execute code using DDE.

Can it include in payloads of DDE?

0xdeadbeefJERKY commented 7 years ago

How you deliver/host the Word document is entirely up to the user. I haven't dabbled much in this technique, but if it only works with a combination of Word 2016 and IE, you're already reducing the chances of success during a phishing campaign/emulated attack. You're more than welcome to use this script to generate the payload and host on your server using this technique though!