search

Inf0secRabbit / BadAssMacros

BadAssMacros - C# based automated Malicous Macro Generator.
394 stars 78 forks source link

Too many line continuations erro in the VBA when copying the final vba shellcode output. #3

Open Neilhoman opened 3 years ago

Neilhoman commented 3 years ago

Great work there. Would you be able to advise, how to resolve "Too many line continuations" error in the Macrs VBA app? new to vba and trying to understand this ;) student so be gentle on me hehehe

podjackel commented 3 years ago

If you can provide an example of the command you're running it'll help with finding the cause.

Neilhoman commented 3 years ago

Thanks Podjackel, Here it's BadAssMacros.exe -i example.bin -w doc -p no -s classic -c 5 -o c:\temp\test.vba

thank you :)

0xElessar commented 2 years ago

Hey @Neilhoman and @Inf0secRabbit ,

I got exactly the same issue. Word 2019. I am going to check with Word 2016 and Excel asap.

0xElessar commented 2 years ago

Just checked Word 2016 and Excel 2016. The same problem.

@Inf0secRabbit what version of Office does your tool support, please?

Inf0secRabbit commented 2 years ago

Heyy @0xElessar

Actually the issue is not really on specific versions, it will not let you insert the shellcode if it exceeds 25 lines. We are trying to solve this issue, expect the fix in the coming few weeks.

Cheers :)

0xElessar commented 2 years ago

Cool. Thanks a lot, @Inf0secRabbit !

ScriptIdiot commented 2 years ago

got the same issue...

null-event commented 2 years ago

It appears that this issue still persists unfortunately.

aress31 commented 2 years ago

@Inf0secRabbit you could concatenate smaller shellcode arrays rather than creating a big one that break the line continuation rule.

Inf0secRabbit commented 2 years ago

@Inf0secRabbit you could concatenate smaller shellcode arrays rather than creating a big one that break the line continuation rule.

Hey,

Yea we actually tried that, by storing it in multiple arrays and concatenating. But unfortunately the issue still persist and due to work we haven't been able to keep up with this :( if you have the solution hmu and open up a PR would be happy to look at it :)

aress31 commented 2 years ago

@Inf0secRabbit unfortunately I am not a C sharp guy but this limitation is greatly restricting the scope of usable payloads. Would be super if you could look into this.