https://github.com/0x09AL/WordSteal

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.
https://github.com/0x09AL/WordSteal

Last synced: 22 days ago
JSON representation

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.

• Host: GitHub
• URL: https://github.com/0x09AL/WordSteal
• Owner: 0x09AL
• Created: 2017-04-03T07:36:28.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2023-09-27T15:23:04.000Z (about 1 year ago)
• Last Synced: 2024-11-10T02:14:31.524Z (about 1 month ago)
• Language: Python
• Size: 1.95 KB
• Stars: 245
• Watchers: 21
• Forks: 76
• Open Issues: 6
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - 0x09AL/WordSteal - This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do. (Python)

README

        
# WordSteal

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.

Microsoft Word has the ability to include images from remote locations.This is an undocumented feature but was found

used by malware creators to include images through http for statistics.We can also include remote files to a SMB server

and the victim will authenticate with his logins credentials.

This is very useful during a pentest because allows you to steal credentials without triggering any alerts and most of 

the security apps do not detect this.