EvilClippy icon indicating copy to clipboard operation
EvilClippy copied to clipboard

Error serving template with webserver option

Open Kaulanab opened this issue 5 years ago • 3 comments

hello! I create a MS Word template (.dotm) that includes a malicious macro in word 2007 on a windows machine. In the file fakecode.vba I put the first line Attribute VB_Base = "0 {00020906-0000-0000-C000-000000000046}", and then the fake vba code. when i try to run "mono EvilClippy.exe -s fakecode.vba -w 8080 attack.dotm" to serve the file from a ubuntu server vm. i get an error message ERROR: Could not open file attack.dotm Please make sure this file exists and is .docm or .xlsm file or a .doc in the Office 97-2003 format. Could not find file "/root/snap/EvilClippy/attack_EvilClippy.dotm"

Kaulanab avatar Nov 24 '20 02:11 Kaulanab

same problem with you, have you solved the problem?

leezp avatar Mar 09 '21 07:03 leezp

same problem with you, have you solved the problem?

No, not yet

Kaulanab avatar Mar 20 '21 06:03 Kaulanab

You need to use office 97 to 2003 it says that in the error also can the program access the directory?

ERROR: Could not open file attack.dotm Please make sure this file exists and is .docm or .xlsm file or a .doc in the Office 97-2003 format. Could not find file "/root/snap/EvilClippy/attack_EvilClippy.dotm"

Lillythefox avatar Nov 13 '21 18:11 Lillythefox