Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save decalage2/e9569a25934ebcd509a1f0265487cb0b to your computer and use it in GitHub Desktop.
Save decalage2/e9569a25934ebcd509a1f0265487cb0b to your computer and use it in GitHub Desktop.
RTF obfuscation techniques
{\rt- RTF SPECIFICATION SUCKS
{\u0097}}
{\uc2 \u0098}}}
{\uc2 \u0099\'**}}
{\uc2 \uc31682 \u0101}
{\u0100}}
{\uc-1 \u0102}
{\object\objemb\objw-\objh-
{\*\objclass \'50\'61\'63\'6b\'61\'67\'65}
{\*\objdata NOT_ENOUGH_MEMORY! \objdata
01050000
02000000
08000000
{\*\Comment: original value 50 61 63 6b 61 67 65 00}
6\bin1000000000000000000000000000000000001P{\*\& HELLO!\bin1}\'}10\'3Z6\\\bin000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036\u0000b6167{\*\alt 0}6{\*\aup 0}{\*\acaps 0}{\atntime 5}0{\*\atntime 0}0
00000000
00000000
3c010000
0200
65696361722e636f6d00
433a5c546f6f6c735c65696361722e636f6d00
00000300
2f000000
433a5c55736572735c41444d494e497e315c417070446174615c4c6f63616c5c54656d705c65696361722e636f6d00
44000000
58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a
2e000000
43003a005c00550073006500720073005c00410044004d0049004e0049007e0031005c0041007000700044006100740061005c004c006f00630061006c005c00540065006d0070005c00650069006300610072002e0063006f006d00
09000000
650069006300610072002e0063006f006d00
12000000
43003a005c0054006f006f006c0073005c00650069006300610072002e0063006f006d00
01050000
00000000
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment