CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC

💻 CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC 🧩 Overview This project reproduces the MonikerLink behavior CVE-2024-21413 in a fully isolated TryHackMe environment to show how certain hyperlink formats can cause Outlook to process a link in a way that leaks...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

CVE-2023-22894

Unauthenticated Strapi Exploit: CVE-2023-22894 This repository contains a proof of concept PoC exploit for CVE-2023-22894, which allows unauthenticated users to leak sensitive information and hijack Strapi administrator accounts by exploiting Strapi's filtering functionality on private fields...

CVE-2025-24071-msfvenom

CVE-2025-24071：通过 .library-ms 文件泄露 NTLM 哈希（Metasploit 模块） 该仓库包含一个 Metasploit 模块 ，用于利用 CVE-2025-24071 漏洞。这是 Windows 资源管理器中的一个漏洞，当从 ZIP 存档中提取恶意的 .library-ms 文件时，会泄露 NTLM 哈希。 开发者：FOLKS-IWD 概述 当用户提取包含特制 .library-ms 文件的 ZIP 存档时，漏洞便会触发。Windows 资源管理器会自动向文件中指定的远程服务器发起 SMB 身份验证请求，从而在无需用户交互的情况下泄露用户的 NTLM 哈...

CVE-2026-91796

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2023-35636

CVE-2023-35636 Microsoft Outlook 信息泄露漏洞（泄露密码哈希） - Expect Script POC CVE-2023-35636 是 Microsoft Outlook 日历共享功能的漏洞，通过在邮件中添加两个标头，可引导 Outlook 共享内容并连接指定机器，从而有机会截获 NTLM v2 哈希。 启动带有 SMB 服务器的 responder 发送邮件并等待（邮件收件人的防火墙必须允许 SMB（445）流量通过） 用法: ./cve-2023-35636.sh mx.fqdn port emailsender emailrecipient...

CVE-2026-91796

Foxit PDF Editor/Reader is susceptible to an NTLM Response Information Disclosure Vulnerability (CVE-2026-91796) because the interface lacks permission verification for secure reading mode . This flaw enables specially crafted PDFs to trigger external SMB authentication without prompting the user...

EUVD-2026-85126

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

CVE-2025-24071

CVE-2025-24071 Windows File Explorer Spoofing Vulnerability - CVE-2025-24071 Leak the NTLM hash of Windows through the extraction of a manipulated ZIP or RAR file, and by exploiting a vulnerability in the handling of .library-ms files a type of file used by Windows to specify libraries and networ...

hello-ReGrade-security

hello-ReGrade-security Una demostración práctica de descubrimiento de vulnerabilidades de día cero conReGrade. Apuntarás una suite de pruebas ordinaria a ReGrade, la grabarás contra un pequeño servicio, la reproducirás contra una segunda copia del mismo servicio , y usarás Claude Code + las...

CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền. This content is for educational purposes only. Use for reference only and do not contact the police. Vulnerability Details CVE ID : CVE-2025-24071 Vulnerable System : NTLM Hash Leak...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

CVE-2025-24071

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

CVE-2025-24071

CVE-2025-24071 - Windows File Explorer NTLM Hash Leak 📋 Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...

cve-2025-24054

CVE-2025-24071：通过 .library-ms 文件泄漏 NTLM Hash（Metasploit 模块） 此仓库包含一个 Metasploit 模块 ，用于利用 CVE-2025-24071——Windows 资源管理器中的漏洞，当从 ZIP 存档中提取恶意的 .library-ms 文件时，会泄漏 NTLM Hash。 开发者：FOLKS-IWD 概述 该漏洞发生在用户提取包含特制 .library-ms 文件的 ZIP 存档时。Windows 资源管理器会自动向文件中指定的远程服务器发起 SMB 认证请求，在无需用户交互的情况下泄漏用户的 NTLM Hash。 此...

OutlookNTLM_CVE-2023-23397

要利用此漏洞，攻击者必须创建一封恶意日历邀请，其中包含对声音文件的引用，并指向攻击者机器上网络共享中的文件。在底层，Outlook 邮件将声音文件的引用存储在一个名为“PidLidReminderFileParameter”的内部参数中。为了确保我们嵌入在恶意邮件中的音频优先于受害者的默认提醒配置，我们还需要将另一个名为“PidLidReminderOverride”的参数设置为 true。 要将“PidLidReminderFileParameter”属性设置为指向网络共享，攻击者可以指定通用命名约定（UNC）路径，而不是本地文件。UNC 用于 Windows...

CVE-2025-24071

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability script by SilentExploit 📖 Description This project detects and demonstrates exploitation of a Windows File Explorer spoofing vulnerability. The issue arises from a Windows library file .library-ms containing a network path,...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 房间： Moniker Link CVE-2024-21413 — TryHackMe 状态： ✅ 完成 日期： 2025年5月30日 🎯 目标 理解并利用 CVE-2024-21413，这是 Microsoft Outlook 中的一个漏洞，通过 Moniker 链接绕过受保护的视图，泄露 NTLM 凭据。学习如何执行攻击以及如何检测或缓解该漏洞。 🗝️ 关键概念 Moniker 链接 — 一种超链接类型，可使用 COM 模型引用 Windows 中的系统组件和应用程序。 受保护的视图 — Outlook...

LeakedWallpaper

Leaked Wallpaper Esta es una herramienta de escalada de privilegios corregida con CVE-2024-38100 en KB5040434 que permite filtrar el hash NetNTLM de un usuario desde cualquier sesión del equipo, incluso si estamos trabajando desde un usuario con bajos privilegios. Uso root@kitploit:...