Possibly Related Threads…

Sqweez · (This post was last modified: Jun 22, 2024, 07:03 PM by Sqweez.)

Lets go pwn together Smile

GL for all
https://app.hackthebox.com/machines/611

a44857437 · (This post was last modified: Jun 22, 2024, 07:44 PM by a44857437.)

It's a Windows machine with SMTP... bit weird (has SAML authentication)

not much on the HTTP yet..

eunaosei · Jun 22, 2024, 07:44 PM

Our website is currently down for maintenance.



We apologise for the inconvenience and appreciate your patience as we work to improve our online presence.



If you have any outstanding invoices or requests, please email them to [email protected] in Excel format. Please note that all macros are disabled due to our security posture.



We will be back as soon as possible. Thank you for your understanding.

prob phishing

a44857437 · (This post was last modified: Jun 22, 2024, 08:18 PM by a44857437.)

(Jun 22, 2024, 07:44 PM)eunaosei Wrote:
Our website is currently down for maintenance. We apologise for the inconvenience and appreciate your patience as we work to improve our online presence. If you have any outstanding invoices or requests, please email them to [email protected] in Excel format. Please note that all macros are disabled due to our security posture. We will be back as soon as possible. Thank you for your understanding.

prob phishing

Probably, to the accounts account

eunaosei · Jun 22, 2024, 07:46 PM

(Jun 22, 2024, 07:45 PM)a44857437 Wrote:
(Jun 22, 2024, 07:44 PM)eunaosei Wrote:
Our website is currently down for maintenance. We apologise for the inconvenience and appreciate your patience as we work to improve our online presence. If you have any outstanding invoices or requests, please email them to [email protected] in Excel format. Please note that all macros are disabled due to our security posture. We will be back as soon as possible. Thank you for your understanding.

prob phishing

Probably, to the account account

yeah lmao

so far i've tried to use metasploit exploit/windows/fileformat/office_excel_slk since macros are disabled, but no luck yet

SomeBody1338 · Jun 22, 2024, 08:22 PM

Probably XLL phish (also matching with a box name)

a44857437 · Jun 22, 2024, 08:30 PM

(Jun 22, 2024, 08:22 PM)SomeBody1338 Wrote: Probably XLL phish (also matching with a box name)

ah... making an XLL, meh

Sqweez · Jun 22, 2024, 09:00 PM

(Jun 22, 2024, 08:22 PM)SomeBody1338 Wrote: Probably XLL phish (also matching with a box name)

Can you please tell me how to send the generated xll file?

imassxck · Jun 22, 2024, 09:10 PM

i maked XLL with
https://github.com/zimnyaa/xyrella
and
swaks --to [email protected] --from [email protected] --header "Subject: test" --body "test" --attach @addin.xll
is not worked ...

asdasas2132122 · Jun 22, 2024, 09:59 PM

How did they create the .xll file?

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	[FREE] HackTheBox All Cheatsheets	Tamarisk	82	10,858	3 hours ago Last Post: imken
	[MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot	htb-bot	164	34,379	3 hours ago Last Post: imken
	[FREE] 300+ Writeups PDF HackTheBox/HTB premium retired	Tamarisk	456	121,192	8 hours ago Last Post: flowerer99
	HTB - ALL Challenges you Stuck in	osamy7593	5	1,204	Yesterday, 05:29 PM Last Post: axiom4
	[FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags	Techtom	109	14,008	Yesterday, 04:02 AM Last Post: shia