Advent of Cyber 2024: Day 10: He had a brain full of macros, and had shells in his soul.

Learning Objectives

• Understand how phishing attacks work
• Discover how macros in documents can be used and abused
• Learn how to carry out a phishing attack with a macro

Follow the steps given in the room and you will get the flag.

Questions:

#1. What is the flag value inside the flag.txt file that’s located on the Administrator’s desktop?
Answer: THM{PHISHING_CHRISTMAS}

Thank you!