-
Notifications
You must be signed in to change notification settings - Fork 50
Office 2016 sandbox
Paulino Calderon edited this page Sep 19, 2017
·
3 revisions
Office 2016 for Mac runs inside an App Sandbox that prevents unauthorized access to user files even if they allow macro execution. This severely reduces the risk of malicious Office macros among Mac users.
However, there are a couple of techniques that will work against Office 2016 for Mac:
- Credential phishing with osascript (See Credential phishing with osascript)
- GrantAccessToMultipleFiles (See Abusing GrantAccessToMultipleFiles)