luckystrike
A PowerShell based utility for the creation of malicious Office macro documents.
Getting Started
- Read this: http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator
- Make sure you are on a Win7-10 machine (32 or 64bit).
- You must be running a current version of PowerShell (v5+).
- You must have Microsoft Excel installed (I did my testing with 2013).
- From an ADMINISTRATIVE PowerShell prompt, run the following command. A luckystrike folder will be created for you.
iex (new-object net.webclient).downloadstring('https://raw.githubusercontent.com/Shellntel/luckystrike/master/install.ps1')
- Run .\luckystrike\luckystrike.ps1 (lowpriv or admin. Doesn't matter).
- Repeat step #1 when you have a question, or submit a github issue. :-)