LOLBAS/winword.exe.md at 9336b4d599c241d86720a6e9b833f9dc173d4cd4 - LOLBAS - Mastermindzh's git

public-mirrors/LOLBAS

mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-27 15:28:34 +01:00

Oddvar Moe 550263cd1e Removed MD files, we only use the webportal from now on. All MD files moved to archive

2018-10-25 18:31:11 +02:00

414 B

Raw Blame History

winword.exe

Functions: Execute


winword.exe /l dllfile.dll
Launch DLL payload.

Resources:
- https://twitter.com/vysecurity/status/884755482707210241
- https://twitter.com/Hexacorn/status/885258886428725250
Full path:
- c:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
Notes: Thanks to Vincent Yiu - @@vysecurity (Cmd), Adam - @Hexacorn (Internals)