Evil Clippy: MS Office maldoc assistant

[deadbody12 1]

At BlackHat Asia they released Evil Clippy, a tool which assists red teamers and security testers in creating malicious MS Office documents. Amongst others, Evil Clippy can hide VBA macros, stomp VBA code (via p-code) and confuse popular macro analysis tools. It runs on Linux, OSX and Windows.

The latest source code of the tool can be found here:

 

 

Github Evil Clippy

 

 

 

Latest binary releases are available at:

 

 

 

Binary Releases

 

 

 

Evil Clippy is maintained by Stan Hegt (@StanHacked).

 

 

 

After its initial release, the project has received significant code contributions from the security team at Walmart, especially from Carrie Robberts (@OrOneEqualsOne).