outflanknl/EvilClippy

Error serving template with webserver option

Kaulanab opened this issue · 3 comments

Kaulanab commented

hello!
I create a MS Word template (.dotm) that includes a malicious macro in word 2007 on a windows machine.
In the file fakecode.vba I put the first line Attribute VB_Base = "0 {00020906-0000-0000-C000-000000000046}", and then the fake vba code.
when i try to run "mono EvilClippy.exe -s fakecode.vba -w 8080 attack.dotm" to serve the file from a ubuntu server vm.
i get an error message
ERROR: Could not open file attack.dotm
Please make sure this file exists and is .docm or .xlsm file or a .doc in the Office 97-2003 format.
Could not find file "/root/snap/EvilClippy/attack_EvilClippy.dotm"

leezp commented

same problem with you, have you solved the problem?

Kaulanab commented

same problem with you, have you solved the problem?

No, not yet

Lillythefox commented

You need to use office 97 to 2003 it says that in the error also can the program access the directory?

ERROR: Could not open file attack.dotm
Please make sure this file exists and is .docm or .xlsm file or a .doc in the Office 97-2003 format.
Could not find file "/root/snap/EvilClippy/attack_EvilClippy.dotm"