Office attacks & ODT

Tools

• Bad ODT get netNTLM with ODT file
  • other bad ODT for getting NTLM hashes
• Macro reverse shell for documents
  • same as ^

ShellCode Runner

• https://arttoolkit.github.io/wadcoms/ShellcodeRunner-VBA/