Skip to content

PCsXcetra/EquationEditorShellCodeDecoder

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 

Repository files navigation

EquationEditorShellCodeDecoder

Tool to decode the encoded Shellcode of this type found in office documents

See the Blogpost to see how to use this. https://pcsxcetrasupport3.wordpress.com/2019/05/22/a-deeper-look-at-equation-editor-cve-2017-11882-with-encoded-shellcode/ I also have decoding notes for this sample in the 7Zip file. The password is the standard infected just incase something hits on the shellcode.

Update: 2021-09-13 Uploaded latest version of the Decoder Version 1.0.0.23 File name: DecodeEquationShellCode.7z No password required.

About

Tool to decode the encoded Shellcode of this type found in office documents

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published