How to reveal codes in word 2013 how to#
How to reveal codes in word 2013 install#

The field will contain the code we are going to execute, so we need to find a good place for it. Now that we have some social engineering in place we are ready to move on to adding a field. Our attack doesn't require macros to be enabled, but these are excellent examples of making a document appear legitimate. This lets us put something at the top of the document to make the document appear more legitimate to the user.Р”В«elow are two examples of documents used to get a user to enable macros. This social engineering attack takes advantage of the fact that the user can see the document when the pop-up appears.

How to reveal codes in word 2013 how to#

A previous article on Word hacking went over some social engineering tricks we can use.Р”В¬heck Out: How To Create & Obfuscate A Virus Inside A Microsoft Word Document They also need to say yes to both for the code to execute. While the user will not get any security warnings, there will still be two pop-ups they get when they open the document. If you do that, you can skip the rest of this step. Conversely, if you happen to have access to the target's computer, you can open a recent document of theirs that they are likely to open again.

Now, we need to do some social engineering. It only takes a few seconds to modify a Word document, so let's see how it's done.Р”Вon't Miss: How To Use Pupy, A Linux Remote Access Tool Step 1: Open WordР”В«egin by opening a new Word document.

How to reveal codes in word 2013 install#

You can just use this to scare friends as a simple prank, or you could use it to install a Remote Access Tool like Pupy. This means we can create a Word document that runs code on opening. We can use it to open any application, including command prompt, and send it data, or in our case, code. To put that in simple terms, DDE executes an application and sends it data. Applications can use the DDE protocol for one-time data transfers and for continuous exchanges in which applications send updates to one another as new data becomes available. It sends messages between applications that share data and uses shared memory to exchange data between applications. The DDE protocol is a set of messages and guidelines. One method is to use the Dynamic Data Exchange (DDE) protocol. Windows provides several methods for transferring data between applications. Although it wasn't intended for that, of course.

Wouldn't it be nice if Microsoft was kind enough to build us a 'feature' that would let us get around those pesky security alerts? Luckily for us, they did, Dynamic Data Exchange. This is an example of the type of security warning that comes up when using a macro.