WEBVTT

00:00:05.680 --> 00:00:08.680
Hey there. Welcome to Pluralsight. In this cybersecurity tools

00:00:08.680 --> 00:00:12.660
course, you'll learn how to hide malicious payloads into legitimate

00:00:12.670 --> 00:00:15.040
Office files using the macro_pack tool.

00:00:15.910 --> 00:00:18.580
One way to really increase your chance of a successful

00:00:18.580 --> 00:00:22.010
phishing attack is masquerading malicious code into files

00:00:22.020 --> 00:00:23.650
that look legitimate to the victim.

00:00:24.590 --> 00:00:28.480
The macro_pack is a tool that help us to hide malicious payloads into

00:00:28.480 --> 00:00:32.729
Microsoft Office files, such as Word documents and Excel spreadsheets.

00:00:33.420 --> 00:00:37.040
In this way, our victims will not suspect about the email attachment

00:00:37.170 --> 00:00:38.390
and more likely will open it.

00:00:39.580 --> 00:00:40.350
In this course,

00:00:40.530 --> 00:00:44.120
you'll learn how to use the macro_pack tool to masquerade any kind of

00:00:44.120 --> 00:00:47.020
malicious file so they look legit to our victim.

00:00:48.190 --> 00:00:51.740
We start by learning the basics about malicious file masquerading

00:00:51.960 --> 00:00:54.350
and have an overview of the macro_pack tool.

00:00:55.030 --> 00:00:55.660
After that,

00:00:55.800 --> 00:00:58.500
we'll explore in our first demo how to hide a Metasploit Meterpreter

00:00:58.500 --> 00:01:02.290
payload into a legitimate Microsoft Word file.

00:01:03.240 --> 00:01:03.850
And finally,

00:01:04.080 --> 00:01:07.500
you'll learn how to create a file dropper with a micro_pack tool,

00:01:07.900 --> 00:01:10.990
which can then be used to distribute Malware hosting remote servers

00:01:11.230 --> 00:01:14.070
via unsuspicious Microsoft Excel spreadsheets.

00:01:15.040 --> 00:01:18.340
So, whether you're trying to hide malicious code for phishing attacks and a

00:01:18.340 --> 00:01:22.240
red team engagement or just looking to test the security awareness of your

00:01:22.250 --> 00:01:26.500
own company, join me and learn how to masquerade malicious files using the

00:01:26.500 --> 00:01:29.050
macro_pack tool, here at Pluralsight.