Microsoft .DOC Exploit

[GunPh@ne]

So with this you can make a .doc file that when opened will display a normal word document while at the same time downloading your .exe and running it silently without the users knowledge.

I'm not sure which version this is working on specifically but I believe it's from 2010 and on.

This does require macro's to be enabled.

Open the word document you will be using and click: file -> options -> customize ribbon -> check off the developer box.
Then in the word document, click the developer tab on the top right.
Next click visual basic and double click on this document in the tree menu on the left.
Then paste this code into that blank page.


MAKE SURE TO REPLACE THE LINK IN THE CODE WITH A LINK TO YOUR FILE

Please, Log in or Register to view codes content!

Then save your file and your done.
The person must have macros enabled for this to work.

If the person doesn't have it enabled simply putting a line of text in your document saying in order to view this document macros must be enabled usually does the trick!

First tutorial ever so if you use it or like it make sure to leave a comment!

 

[_kevin]

detective by Anti-Virus kaspersky and another anti-virus programs

 

[jni666]

I have heard there are similar ways that bypass the macros check. Anyone knows the details?

 

[hacxx]

Thanks, nice trick. I use XMLHTTP in a vbs to download and execute files, will post.

Remember that XMLHTTP or XMLHTTPRequest is deprecated which means it won't work in the near future.

 

[carlarosa]

tyy

 

[ojktugtgf]

amazing

 

[gpdd1]

quality content

 

[lewik9]

good share

 

[mizrab009]

good share, thanks

 

[brianreyna247]

Great!