christophetd / spoofing-office-macro Goto Github PK

Is this dead project? When I run macro on Windows 10, it will not work...

Hey I am trying to use the VB macro on 64-bit machine O365 but looks like it's not compatible. It gave some ptrsafe errors. I fixed them by adding ptrsafe to the declare statements but then I got some ByRef errors. I also tried converting long to longptr as suggested in some articles for converting 32 nit vb to 64 bit. Is there any chance that you can provide 64 bit version or any tips to fix the errors?

hi bro ,I really appreciate your writing this code。
but,Can you convert VBA code to vbs code or js code ? Vbs code or js codes is very userful
I will be very grateful if you can

windows defender is flagging for thread

I have the same issue as the others.
A buffer overflow at

result = NtQueryInformationProcess(newProcessHandle, 0, pbi, Len(pbi), size)

Hi

I fix the issues and tried in 32bit and 64bit office at Windows10 Environment

But I found result = NtQueryInformationProcess(newProcessHandle, 0, pbi, Len(pbi), size) doesn't work. the result is FALSE

And the new Process still be a childProcess of WINWORD.EXE.
Can you help me

By the way, the function to getPid is not work.
I used WMI to get Pid

Function getProcessId(ByVal name As String)
    Dim objServices As Object, objProcessSet As Object, Process As Object
    Dim tmp As Integer
    Set objServices = GetObject("winmgmts:\\.\root\CIMV2")
    Set objProcessSet = objServices.ExecQuery("SELECT ProcessID, name FROM Win32_Process WHERE name = " & Chr(&H22) & name & Chr(&H22), , 48)
    For Each Process In objProcessSet
        tmp = Process.ProcessID
    Next
    getProcessId = tmp
End Function

Thanks