And although the technology is 26 years old by now, Excel 4.0 macros are still supported in the most recent Microsoft Office versions (including Office 2016, at time of writing). However, XLM macros are a hidden gem for red teamers and turn out to be a very good alternative to VBA macros for offensive purposes: XLM can be difficult to analyse and it appears that most antivirus solutions have trouble detecting XLM maldocs. Virtually all malicious macro documents for MS Office are based on Visual Basic for Applications (VBA). If you grew up in the Windows 95 age or later, just as I did, you might have never heard of this technology that was introduced as early as 1992. In this post, I will dive into Excel 4.0 macros (also called XLM macros – not XML) for offensive purposes. Old school: evil Excel 4.0 macros (XLM) Stan Hegt | October 6, 2018
0 kommentar(er)
