rxwx / cve-2018-0802 Goto Github PK

i made a video to demonstrate exploit not executing EXECUTABLE

Funny think.
So not considered to Windows Update, i builded few .rtf files with some random .exe and it worked fine, since 2 days ago(i tried several python versions) i build it normaly, 0802 works, but 11882 is not working.
Anyone have idea?

hi.
I tried it with reverse_shell msfvenom , and it worked just fine. but when i try it with download_exec , it not working. the file wont run.
do you have any idea ?

The calc.bat dropped in the %TEMP% folder only has the string "calc.exe" in it. The "cmd.exe /c" portion is missing. Just FYI.

build doc from ur code and its not working....

I only see the yara folder and the readme.md file. I don't see the packager_exec_CVE-2018-0802.py script used to create the file.

Hey so I use the python_packager .py script but it doesn’t work. When I open doc on target machine , it just opens word document, does not load calc.exe (which I included as a test .exe) just a small box appears on Word document, and sometimes with numbers 1111 beside the box. Any ideas what’s wrong? Opening on Word 2007, Windows 7

Update: I followed the directions to replace eqnedt32.exe , and now it seems to be working. It works with example.rtf very well, launches calc.exe perfectly. I tried with iexplore.exe, and I used a -d flag and it seemed to work, but iexplore.exe opened behind the Word document, and froze on open. Can you provide a deobfuscated code for example.rtf? I would like to know how you crafted that file and replace your calc.exe with another .exe

i know its too much basic question can you please guide me that how to apply yara rules on doc file ??
or it can be also applied on python file ??
also wanna know how to use that stripe key code please berief me i'll be thankful it will help me in my school security project thanks in advance 👍

how i can replace white image to something else?

i have error this errors:

python packager_exec_CVE-2018-0802.py -e "cmd.exe /c start calc.exe" -o test.rtf
Traceback (most recent call last):
File "packager_exec_CVE-2018-0802.py", line 337, in
f.write(create_rtf(RTF_HEADER, RTF_TRAILER, args.executable, args.double))
File "packager_exec_CVE-2018-0802.py", line 319, in create_rtf
p = Package(executable)
File "packager_exec_CVE-2018-0802.py", line 22, in init
with open(filename,'rb') as f: