rapid7/metasploit-framework — pull request #1425 by SphaZ (2013-02-01 07:05:19+00:00)
Title: added word_unc_injector auxiliary module

Module for injecting UNC paths into word .docx documents.

This module will inject an UNC path into an existing local
.docx document, or create an empty one. For
creation of the empty file, some resource files
were required.

The injected UNC path can point to a capture or relay
server where netNTLM credentials will be submitted
once the document is opened in write mode.
These then can be used for relay or password attacks.

More info about the module and its usage: http://jedicorp.com/?p=534