Macrome an Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet – for example: dotnet run — build –decoy-document Docs\decoy_document.xls –payload Docs\popcalc.bin or dotnet buildcd bin/Debug/netcoreapp2.0dotnet Macrome.dll deobfuscate …
Continue reading “Macrome : Excel Macro Document Reader/Writer For Red Teamers And Analysts”