bhdresh / CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
723 stars 259 forks source link

Unable to open Putty - GUI based apps #39

Closed DiagoSilvr closed 7 years ago

DiagoSilvr commented 7 years ago

As testing i was trying to open a GUI based program like putty when the user opens the file

It correctly make GET request, I can verify through wireshark that the file comes from the server but it doesn't get executed (no putty displayed )

Any technique to display this ? or it doesn't support GUI based apps.

Thanks

bhdresh commented 7 years ago

@DiagoSilvr , what is the usecase here?

Check with CLI payload to ensure that setup is vulnerable to CVE-2017-0199. If CLI version is working, will dig further.

Thanks.

DiagoSilvr commented 7 years ago

Yes it works with metasploited based and CLI based but not with putty or GUI based