daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

office-attacks.md (3573B)

      1 ---
      2 title: "Office - Attacks"
      3 topic: "Methodology and Resources"
      4 topicSlug: "methodology-and-resources"
      5 sourcePath: "Methodology and Resources/Office - Attacks.md"
      6 sourceUrl: "https://github.com/swisskyrepo/PayloadsAllTheThings/blob/3ac27901c711/Methodology%20and%20Resources/Office%20-%20Attacks.md"
      7 sha: "3ac27901c711"
      8 isReadme: false
      9 ---
     10 
     11 # Office - Attacks
     12 
     13 :warning: Content of this page has been moved to [InternalAllTheThings/redteam/access/office-attacks](/internal/redteam/access/office-attacks)
     14 
     15 - [Office Products Features](/internal/redteam/access/office-attacks#office-products-features)
     16 - [Office Default Passwords](/internal/redteam/access/office-attacks#office-default-passwords)
     17 - [Office Macro execute WinAPI](/internal/redteam/access/office-attacks#office-macro-execute-winapi)
     18 - [Excel](/internal/redteam/access/office-attacks#excel)
     19     - [XLSM - Hot Manchego](/internal/redteam/access/office-attacks#xlsm---hot-manchego)
     20     - [XLS - Macrome](/internal/redteam/access/office-attacks#xls---macrome)
     21     - [XLM Excel 4.0 - SharpShooter](/internal/redteam/access/office-attacks#xlm-excel-40---sharpshooter)
     22     - [XLM Excel 4.0 - EXCELntDonut](/internal/redteam/access/office-attacks#xlm-excel-40---excelntdonut)
     23     - [XLM Excel 4.0 - EXEC](/internal/redteam/access/office-attacks#xlm-excel-40---exec)
     24     - [SLK - EXEC](/internal/redteam/access/office-attacks#slk---exec)
     25 - [Word](/internal/redteam/access/office-attacks#word)
     26     - [DOCM - Metasploit](/internal/redteam/access/office-attacks#docm---metasploit)
     27     - [DOCM - Download and Execute](/internal/redteam/access/office-attacks#docm---download-and-execute)
     28     - [DOCM - Macro Creator](/internal/redteam/access/office-attacks#docm---macro-creator)
     29     - [DOCM - C# converted to Office VBA macro](/internal/redteam/access/office-attacks#docm---c-converted-to-office-vba-macro)
     30     - [DOCM - VBA Wscript](/internal/redteam/access/office-attacks#docm---vba-wscript)
     31     - [DOCM - VBA Shell Execute Comment](/internal/redteam/access/office-attacks#docm---vba-shell-execute-comment)
     32     - [DOCM - VBA Spawning via svchost.exe using Scheduled Task](/internal/redteam/access/office-attacks#docm---vba-spawning-via-svchostexe-using-scheduled-task)
     33     - [DCOM - WMI COM functions (VBA AMSI)](/internal/redteam/access/office-attacks#docm---wmi-com-functions)
     34     - [DOCM - winmgmts](/internal/redteam/access/office-attacks#docm---winmgmts)
     35     - [DOCM - Macro Pack - Macro and DDE](/internal/redteam/access/office-attacks#docmxlm---macro-pack---macro-and-dde)
     36     - [DOCM - BadAssMacros](/internal/redteam/access/office-attacks#docm---badassmacros)
     37     - [DOCM - CACTUSTORCH VBA Module](/internal/redteam/access/office-attacks#docm---cactustorch-vba-module)
     38     - [DOCM - MMG with Custom DL + Exec](/internal/redteam/access/office-attacks#docm---mmg-with-custom-dl--exec)
     39     - [VBA Obfuscation](/internal/redteam/access/office-attacks#vba-obfuscation)
     40     - [VBA Purging](/internal/redteam/access/office-attacks#vba-purging)
     41         - [OfficePurge](/internal/redteam/access/office-attacks#officepurge)
     42         - [EvilClippy](/internal/redteam/access/office-attacks#evilclippy)
     43     - [VBA AMSI](/internal/redteam/access/office-attacks#vba-amsi)
     44     - [VBA - Offensive Security Template](/internal/redteam/access/office-attacks#vba---offensive-security-template)
     45     - [DOCX - Template Injection](/internal/redteam/access/office-attacks#docx---template-injection)
     46     - [DOCX - DDE](/internal/redteam/access/office-attacks#docx---dde)
     47 - [References](/internal/redteam/access/office-attacks#references)