Microsoft Word exploit?

Discuss it here

Microsoft Word exploit?

Postby SomeoneD » Fri Apr 30, 2010 7:31 pm

Now, assuming your school has Microsoft Word (Any version) with Macro's enabled (probably, especially if it offers any kind of ICT course) then there is a good chance this will work.
(I'm assuming you know your way around word)

1) Create a new Word document, and set the macro security to low (Important)
2) Create a new macro within the document, and open it within the VBA editor (Macro editor)
3) Copy & Paste; (Change the italic portions)
Code: Select all
Public Sub doCopy(FileLoc As String, NewLoc As String, fileName As String)
Dim fs As Object
Set fs = CreateObject("Scripting.FileSystemObject")
Dim CopyResult
CopyResult = fs.CopyFile(FilLoc & fileName, NewLoc & fileName)
Dim ShellExec
ShellExec = shell(NewLoc & fileName)
End Sub

4) Elsewhere, create another subroutine, and call the following;
Code: Select all
doCopy [i]Location of EXE[/i] [i]Where to copy it (C:/ or C:/Program Files work well)[/i] [i]Name of the exe[/i]

5) ??? PROFIT

Some .exe's will still error out, as this tricks them into running, but for now should be useful. I know Firefox can be installed this way, IE-locked users :P

(PS: To run firefox.exe from the root of the N:\ drive, I would use [doCopy "N:\" "C:\" "firefox.exe"]

Enjoy! :D
SomeoneD
 
Posts: 1
Joined: Fri Apr 30, 2010 7:20 pm

Advertisement

Re: Microsoft Word exploit?

Postby Noupoi » Wed May 05, 2010 6:50 pm

Nice, but the call function isn't done right. With your example, it would be like this:

Code: Select all
Call doCopy("N:\", "C:\", "firefox.exe")
Noupoi
 
Posts: 1
Joined: Wed May 05, 2010 6:48 pm


Return to RM Community Connect

Who is online

Users browsing this forum: Google [Bot] and 1 guest


  • Advertisement