EXCELntDonut icon indicating copy to clipboard operation
EXCELntDonut copied to clipboard

Published 20 hours ago • verified publisher icon RedSiege

Not working!!!maybe the reason is the system is not english?

Open Tazkimi opened this issue 4 years ago • 3 comments

the shellcode which writen to memory changed to 0x20 if the ascii vaule >=0x80. image image image

Tazkimi avatar Feb 04 '21 10:02 Tazkimi

I test it with Excel 2016x64 and Excel 2013x64 ,but they both doesn't work. Anybody can give me help.Thank you.

Tazkimi avatar Feb 19 '21 07:02 Tazkimi

It's definitely possible this doesn't work due to a different language pack. This tool has only been tested on English-based versions of Excel and will only be maintained for those versions. If you find a fix and want to submit a pull request, we'd be happy to merge it in for others.

joeleonjr avatar Feb 19 '21 21:02 joeleonjr

I try to use base64 decoder to bypass this problem, but i meet new a problem. I can't pass a NULL POINTER to CryptStringToBinaryA function.

Tazkimi avatar Mar 01 '21 08:03 Tazkimi