MacroPack Community is a tool used to automatize obfuscation and generation of retro formats such as MS Office documents or VBS like format. It also handles various shortcuts formats. This tool can be used for red teaming, pentests, demos, and social engineering assessments. MacroPack will simplify antimalware solutions bypass and automatize the process from vb source to final Office document or other payload type. It is very simple to use:
Note: Windows platform with the right MS Office applications installed is required for Office documents automatic generation or trojan features.
MacroPack pro version also allows you to trojan existing Office files with option --trojan or -T.
Ms Office Supported formats are:
- No configuration required
- Everything can be done using a single line of code
- Generation of majority of Office formats and VBS based formats
- Payloads designed for advanced social engineering attacks (email, USB key, etc)
Note: Windows platform with the right MS Office applications installed is required for Office documents automatic generation or trojan features.
Generation
MacroPack can generate several kinds of MS office documents and scripts formats. The format will be automatically guessed depending on the given file extension. File generation is done using the option --generate or -G.MacroPack pro version also allows you to trojan existing Office files with option --trojan or -T.
Ms Office Supported formats are:
- MS Word (.doc, .docm, .docx, .dotm)
- MS Excel (.xls, .xlsm, .xslx, .xltm)
- MS PowerPoint (.pptm, .potm)
- MS Access (.accdb, .mdb)
- MS Visio (.vsd,.vsdm)
- MS Project (.mpp)
- VBA text file (.vba)
- VBS text file (.vbs).
- Windows Script File (.wsf)
- Windows Script Components scriptlets (.wsc, .sct)
- HTML Applications (.hta)
- XSLT Stylesheet (.xsl) (Yes MS XSLT contains scripts ^^)
- Shell Link (.lnk)
- Explorer Command File (.scf)
- URL Shortcut (.url)
- Groove Shortcuts (.glk)
- Settings Shortcuts (.settingcontent-ms)
- MS Library (.library-ms)
- Setup Information (.inf)
- Excel Web Query (.iqy)
- Visual Studio Project (.csproj)
- Command line (.cmd)
- SYmbolic LinK (.slk) Pro version only
