Sell My Home Fast Cash| Riverside|San-Bernardino|Inland-Empire|SoCal http://www.ibuyandsellhousesincali.com/sell-your-house/ ... https://www.youtube.com/watch?v=gx0Us0KkN0w

#TheFatRat #EvilClippy #MicroSploit A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows. https://github.com/outflanknl/EvilClippy Evil Clippy A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows. If you're new to this tool, you might want to start by reading our blog post on Evil Clippy: https://outflank.nl/blog/2019/05/05/evil-clippy-ms-office-maldoc-assistant/ This project should be used for authorized testing or educational purposes only. Current features Hide VBA macros from the GUI editor VBA stomping (P-code abuse) Fool analyst tools Serve VBA stomped templates via HTTP Set/Remove VBA Project Locked/Unviewable Protection If you have no idea what all of this is, check out the following resources first: Our MS Office Magic Show presentation at Derbycon 2018 VBA stomping resources by the Walmart security team Pcodedmp by Dr. Bontchev How effective is this? At the time of writing, this tool is capable of getting a default Cobalt Strike macro to bypass all major antivirus products and most maldoc analysis tools (by using VBA stomping in combination with random module names). Technology Evil Clippy uses the OpenMCDF library to manipulate MS Office Compound File Binary Format (CFBF) files, and hereto abuses MS-OVBA specifications and features. It reuses code from Kavod.VBA.Compression to implement the compression algorithm that is used in dir and module streams (see MS-OVBA for relevant specifications). Evil Clippy compiles perfectly fine with the Mono C# compiler and has been tested on Linux, OSX and Windows. Compilation A cross-platform compiled binary can be found under "releases". OSX and Linux Make sure you have Mono installed. Then execute the following command from the command line: mcs /reference:OpenMcdf.dll,System.IO.Compression.FileSystem.dll /out:EvilClippy.exe *.cs Now run Evil Clippy from the command line: mono EvilClippy.exe -h Windows Make sure you have Visual Studio installed. Then execute the following command from a Visual Studio developer command prompt: csc /reference:OpenMcdf.dll,System.IO.Compression.FileSystem.dll /out:EvilClippy.exe *.cs Now run Evil Clippy from the command line: EvilClippy.exe -h Usage examples Print help EvilClippy.exe -h Hide/Unhide macros from GUI Hide all macro modules (except the default "ThisDocument" module) from the VBA GUI editor. This is achieved by removing module lines from the project stream [MS-OVBA 2.3.1]. EvilClippy.exe -g macrofile.doc Undo the changes done by the hide option (-g) so that we can debug the macr ... https://www.youtube.com/watch?v=8VR-E6dyqVQ