YoVDO

Execution with macro_pack

Offered By: Pluralsight

Tags

Penetration Testing Courses Cybersecurity Courses Phishing Attacks Courses Mitre Att&ck Framework Courses

Course Description

Overview

Knowing how to masquerade malicious content into legitimate files is key when performing phishing attacks. In this course, you will explore the macro_pack tool, which allows you to hide malicious payloads into Microsoft Office files.

Masquerading malicious files into legitimate files is crucial for a successful phishing attack. When the malicious payload is hidden into legitimate documents, the victims are more likely to open the file, giving us access to their computer. In this course, Execution with macro_pack, you will see one of the most useful tools for malicious file masquerading, the macro_pack. First, you will learn the basics about malicious file masquerading and an overview of the macro_pack tool. Next, you will explore how to hide a Metasploit Meterpreter payload into a Microsoft Word file. Finally, you will learn how to create a file dropper with the macro_pack, which can be used to distribute malware hosted in remote servers via unsuspicious Microsoft Excel spreadsheets. When you are finished with this course, you will have the skills and knowledge of the macro_pack tool to masquerade malicious payloads into Microsoft Office files and covers three important tactics from the MITRE ATT&CK framework: User Execution - Malicious File (T1204.002), Command and Scripting Interpreter - Visual Basic (T1059.005) and Phishing - Spearphishing Attachment (T1566.001).

Taught by

Ricardo Reimao

Related Courses

Collection with PowerSploit
Pluralsight
Credential Access with Mimikatz
Pluralsight
Credential Access with Responder
Pluralsight
Credential Access with THC Hydra
Pluralsight
Defense Evasion with ProxyChains
Pluralsight