search

STMCyber / boobsnail

BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.
https://blog.stmcyber.com/boobsnail-excel-4-0-macro-generator/
MIT License
253 stars 51 forks source link

No work this...maybe can you please add a screenshot for a sample command& #2

Open m1gelka opened 3 years ago

m1gelka commented 3 years ago

I've just followed your instructions, copy past in 4.0 macro , then data , choose semicolon as delimiter finish then save. there is no execution , I have checked with process hacker. can you screenshot the different steps , thx for advance. im test MS Office 2016 ENG

gettheguru commented 3 years ago

Hi - this tool is working perfectly. I expect you will notice it is using R1C1 notation, whereas the default notation in Excel nowadays is A1. This is easily changed from Excel Options > Formulas. To confirm it's working, right click the top cell and select 'Run'. Check you're using the auto open option otherwise. I hope this helps you. Capture

m1gelka commented 3 years ago

Привет, этот инструмент работает отлично. Я ожидаю, что вы заметите, что он использует нотацию R1C1, тогда как в настоящее время в Excel по умолчанию используется нотация A1. Это легко изменить в «Параметры Excel»> «Формулы». Чтобы убедиться, что он работает, щелкните правой кнопкой мыши верхнюю ячейку и выберите «Выполнить». В противном случае убедитесь, что вы используете опцию автоматического открытия. Я надеюсь, это поможет вам. Захватывать

000

m1gelka commented 3 years ago

газ no work again....

m1gelka commented 3 years ago

--- Dont work, and still, no download and create test.exe

gettheguru commented 3 years ago

Hi, here is a video - hope that helps.

https://user-images.githubusercontent.com/46968858/122377334-e7ede300-cf5c-11eb-85ea-c023beedad6b.mp4

m1gelka commented 3 years ago

Hi, here is a video - hope that helps.

Boobsnail1.mp4

thanks, how you use payload?)

gettheguru commented 3 years ago

Hi, here is a video - hope that helps. Boobsnail1.mp4

thanks, how you use payload?)

This shows the DownloadExecute option working as expected (although I changed it to launch with explorer.exe rather than cmd.exe so there's no unnecessary dialogue box). What you are executing is up to you.