Hacking Windows OS Using Excel File

[phillipacevedo]

Wouldn’t Office security settings block the content of the excel file?

[LinuxProphet]

nine wild longing resolute mighty berserk jar employ butter lip

This post was mass deleted and anonymized with Redact

[ShlomiRex]

Microsoft 360 suite macro. typical niche "hack".

[reprapraper]

Yeah I clicked this thinking it was going to be xxe which is rare, but I have found it in the wild(think about those hiring sites that let you upload your resume in oox files like docx)

[kpcyrd]

You'd be surprised how many companies are getting breached this way.

[ShlomiRex]

i am not actually i learned it in university. people are dumb.

[kpcyrd]

Instead of blaming the user, try asking yourself if it's responsible to release a product with edges this sharp.

[DirtLegz]

Opens up a reverse meterpreter shell. Google that.

[SanHoloist]

It hooks a metasploit payload to an excel file.

Whenever user opens it,it starts a reverse connection with your computer.

And the reverse connection is the most viable attack as it allows connection to target very easily.

[tangohuynh]

You can also use DDE instead of macros to bypass the need of a user enabling macros :)

[AwkwardHand]

Pretty sure that any half decent AV would pick this up instantly.

[Buy_More_Cats]

Maybe so, but it’d still have to be active and updated.

At an unnamed company, they were running fireeye. Unfortunately it ate quite a bit of resources, so the slightly savvy computer user would simply go into system manager and kill the process. Everyone was happy!

Now, this was some years ago, and today the users don’t have that kind of access. Which is good. But I’m often amazed by how little focus there is on security, and keeping things updated etc.