2021-02-21 19:17:57 +00:00
# Office - Attacks
2024-01-12 15:18:36 +00:00
:warning: Content of this page has been moved to [InternalAllTheThings/redteam/access/office-attacks ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/ )
* [Office Products Features ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#office-products-features )
* [Office Default Passwords ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#office-default-passwords )
* [Office Macro execute WinAPI ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#office-macro-execute-winapi )
* [Excel ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#excel )
* [XLSM - Hot Manchego ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#xlsm---hot-manchego )
* [XLS - Macrome ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#xls---macrome )
* [XLM Excel 4.0 - SharpShooter ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#xlm-excel-40---sharpshooter )
* [XLM Excel 4.0 - EXCELntDonut ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#xlm-excel-40---excelntdonut )
* [XLM Excel 4.0 - EXEC ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#xlm-excel-40---exec )
* [SLK - EXEC ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#slk---exec )
* [Word ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#word )
* [DOCM - Metasploit ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---metasploit )
* [DOCM - Download and Execute ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---download-and-execute )
* [DOCM - Macro Creator ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---macro-creator )
* [DOCM - C# converted to Office VBA macro ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---c-converted-to-office-vba-macro )
* [DOCM - VBA Wscript ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---vba-wscript )
* [DOCM - VBA Shell Execute Comment ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---vba-shell-execute-comment )
* [DOCM - VBA Spawning via svchost.exe using Scheduled Task ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---vba-spawning-via-svchostexe-using-scheduled-task )
* [DCOM - WMI COM functions (VBA AMSI) ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---wmi-com-functions )
* [DOCM - winmgmts ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---winmgmts )
* [DOCM - Macro Pack - Macro and DDE ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docmxlm---macro-pack---macro-and-dde )
* [DOCM - BadAssMacros ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---badassmacros )
* [DOCM - CACTUSTORCH VBA Module ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---cactustorch-vba-module )
* [DOCM - MMG with Custom DL + Exec ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docm---mmg-with-custom-dl--exec )
* [VBA Obfuscation ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#vba-obfuscation )
* [VBA Purging ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#vba-purging )
* [OfficePurge ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#officepurge )
* [EvilClippy ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#evilclippy )
* [VBA AMSI ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#vba-amsi )
* [VBA - Offensive Security Template ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#vba---offensive-security-template )
* [DOCX - Template Injection ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docx---template-injection )
* [DOCX - DDE ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#docx---dde )
* [References ](https://swisskyrepo.github.io/InternalAllTheThings/redteam/access/office-attacks/#references )
