Black Hills InfoSec - Having Fun with ActiveX Controls in Microsoft Word

Marcello Salvati// During Red Team and penetration tests, it’s always important and valuable to test assumptions. One major assumption I hear from Pentesters, Red teamers and clients alike is that most networks (or their own network) block outbound SMB traffic. In my phishing payloads I always try to inject a UNC path: If macros are […]

The post Having Fun with ActiveX Controls in Microsoft Word appeared first on Black Hills Information Security.

from Black Hills Information Security https://www.blackhillsinfosec.com/having-fun-with-activex-controls-in-microsoft-word/