Injecting Meterpreter into Excel files using XLSInjector

By Milo2012

I have just written a new script to injects meterpreter shell to excel file.

This will speed up the pentesting process to embed malicious VBA scripts in excel files.

For this script to work, you will need windows, microsoft excel, perl and perl module Win32:OLE

To install perl module Win32:OLE (take note that its case sensitive)
C:\> CPAN
cpan> install Win32:OLE

To run the script, simple type

[If you want it to download an excel file from the web]
C:\ perl xlsinjector.pl -u http://website/excel.xls -o 1234.xls

[If you want it to use a local excel file. Put the excel file in the same folder as the script]
C:\ perl xlsinjector.pl -i excel.xls -o 1234.xls

The -o argument is optional.

Video :

Download

http://videos.securitytube.net/Injecting-Meterpreter-into-Excel-files-using-XLSInjector.mp4

View

http://securitytube.net/Injecting-Meterpreter-into-Excel-files-using-XLSInjector-video.aspx

# ITS ©

# 2008 - 2009