A cobaltstrike script that integrates DDEAuto Attacks
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Failed to load latest commit information.



A cobaltstrike script that integrates DDEAuto Attacks (launches a staged powershell CS beacon)

Readme Things

This is not massively stealthy as far as CS scripts go anything like that at the moment, more of a proof of concept, and for having a play. Customise as you see fit to your needs.

As an example for the word errors pop up I've used a fake 'Symantec Decryption Module' load error - customise for what you think you need for your red-teaming.

Pictures (worth 1000 words)

Workflow in Cobaltstrike: alt text

What users see in word (rememeber this only works when protected mode has been enabled...) alt text

Thanks! Matt