RTF_11882_0802

CVE-2017-11882

CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882

MITRE CVE-2017-11882: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11882

Pesquisa: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about

Análise do patch: https://0patch.blogspot.ru/2017/11/did-microsoft-just-manually-patch-their.html

CVE-2018-0802

CVE-2018-0802: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802

Pesquisa: https://research.checkpoint.com/another-office-equation-rce-vulnerability/

Uso

usage: RTF_11882_0802.py [-h] -c COMMAND -o OUTPUT [-i INPUT]

PoC para CVE-2010-0802 e CVE-2017-11882

argumentos opcionais:
  -h, --help            mostra esta mensagem de ajuda e sai
  -c COMMAND, --command COMMAND
                        Comando executado no sistema alvo
  -o OUTPUT, --output OUTPUT
                        Arquivo RTF de saída do exploit
  -i INPUT, --input INPUT
                        Arquivo RTF normal de entrada