Infiltr8: Red-Book

Infiltr8: Red-Book

Network Services Password Attacks

HTML Smuggling Phishing with Calendars (.ICS Files)

Phishing With Microsoft Office

MS Office - VBA (Macros)MS Office - RTF Files RCE MS Office - Custom XML parts MS Office - Excel 4.0 (XLM) Macros MS Office - VBA Stomping MS Office - Remote Dotm Template Injection

Phishing via Proxy

Defense Evasion

Privilege Escalation

Credential Access

Lateral Movement

Red-TeamingInitial Access Phishing Phishing With Microsoft Office

Work in progress

This page is incomplete — content may be missing or unverified.

MS Office - Excel 4.0 (XLM) Macros

Theory

In July of 2021, Microsoft released a new Excel Trust Center setting option to restrict the usage of Excel 4.0 (XLM) macros and they are now disabled by default.

Practice

Resources

Phishing: XLM / Macro 4.0 | Red Team Noteswww.ired.team www.outflank.nlwww.outflank.nl

MS Office - Custom XML parts

Previous Page

MS Office - VBA Stomping

MITRE ATT&CK™ Hide Artifacts: VBA Stomping - Technique T1564.007

On this page

Theory Practice Resources