Vulnerability Development: Re: Word Macros & file sharing?

[Aviram Jenik <aviram () SECURITEAM COM>]

Hi,

Like others have mentioned, a VB script can do anything it wants, simply by
running a custom EXE.

You might like to check out the following tool that encapsulates an EXE
inside a VB script and opens it on-the-fly when the script is executed:
http://www.securiteam.com/tools/Encapsulation_EXE_in_a_VB_Script__creation_t
ool_.html
(NOTE: URL might be wrapped)

--
Aviram Jenik
Beyond Security Ltd.
http://www.BeyondSecurity.com
http://www.SecuriTeam.com


----- Original Message -----
From: "Marius Huse Jacobsen" <mahuja () C2I NET>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Thursday, March 15, 2001 11:40 PM
Subject: Re: Word Macros & file sharing?


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I haven't looked into it, but I believe a script *may* be able to
> save a binary file (.exe?) and execute it.
> I doubt there is any documented way of doing it though...
>
> - ----- Original Message -----
> From: "Meritt James" <meritt_james () BAH COM>
> To: <VULN-DEV () SECURITYFOCUS COM>
> Sent: Thursday, March 15, 2001 3:39 PM
> Subject: Word Macros & file sharing?
>
>
> > Can word macros enable file sharing?
> >
> > Given the rash of viri and that "Hacking for idiots" GUI, this
> > seems to be a dangerous combination that will soon hit (if it
> > works).