Hands-On Red Team Tactics

Payload generation – MS Office macros

Payload execution via Office macros is the new black. If you have heard about the uproar of ransomware, then you must know about macros as well. For the past few years, macros have been used to execute the payload embedded in it. However, for a successful execution, the victim needs to be convinced to click on Enable Content in the malicious document. To start generating macros-enabled payload embedded in the document, click the button shown in the following screenshot:

At this point, you will get a listener window where you will have to select the listener to use once the payload is executed over the ...