search

chvancooten / follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
1.13k stars 255 forks source link

Update follina.py #19

Closed DanusMinimus closed 2 years ago

DanusMinimus commented 2 years ago

File name fix, for some reason added extension is .tlp that would cause a "no file found" error

chvancooten commented 2 years ago

That is weird, I did test it with this extension and it works without issues. Does it return that error even if the file is present? 🤔

DanusMinimus commented 2 years ago

This file does not exist as the .tlp is the extension referring to the docx files, the rtf file is located within src/rtf/clickme.rtf

chvancooten commented 2 years ago

The template file was renamed right, so it should be here: https://github.com/chvancooten/follina.py/blob/main/src/rtf/clickme.rtf.tpl

I renamed it since this is the template for the RTF and not an actual RTF. Additionally, this allows us to add all RTF files to .gitignore so they aren't managed by git.

DanusMinimus commented 2 years ago

I see, Pull Request can be closed then as the problem was internal in my repo where the RTF file was not renamed with the proper name.

chvancooten commented 2 years ago

Cool, thanks for the confirmation!