CVE-2017-8570

Usage:

After downloading the script, modify attack_ip to the IP of Kali, LPORT to the port that msf will listen on, and DIR to any empty directory

Give the script 777 permissions

chmod 777 auto

Then run the script

./auto

Then find the Invoice.ppsx file in the DIR+Office8570 directory and send it to the victim After the victim opens the Invoice.ppsx file, it will use PowerShell to download shell.exe, and then a meterpreter session will be returned