backdoorppt

backdoorppt - 'Herramienta de suplantación de extensiones de Office' root@kitploit: Versión lanzada: v1.7-Stable Autor: pedro ubuntu r00t-3xp10it Distribuciones soportadas: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transforma tu payload.exe en un falso document...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina Info : New Microsoft Office zero-day used in attacks to execute PowerShell Summary On the 29th of May 2022, the NaoSec team, an independent Cyber Security Research Team, discovered a malicious Office document shared on Virustotal. This...

Follina-CVE-and-CVE-2021-40444

Exploiting Follina CVE and CVE-2021-40444 Vulnerabilities Table of Contents 1. Introduction 2. Prerequisites 3. Setup and Installation 4. Usage 5. Detailed Explanation 6. Commands 7. Disclaimer Introduction This repository contains scripts and resources for exploiting the Follina CVE and...

CVE-2024-54761

BigAnt Office Messenger 5.6.06 RCE via SQL Injection SQL injection vulnerability in BigAnt Messenger causes RCE vulnerability. Follow the steps to exploit. Usage: root@kitploit: CVE-2024-54761.py -h -r RHOST -p RPORT -u USERNAME -P PASSWORD options: -h, --help show this help message and exit -r,...

macphish

macphish Generador de Payloads de Macros para Office en Mac Vectores de ataque Hay 4 vectores de ataque disponibles: beacon creds meterpreter meterpreter-grant Para el método 'creds', macphish puede generar el script de Applescript directamente, en caso de que necesites ejecutarlo desde un shell...

Zphisher-GUI-Back_office

Mi website: https://microjoan.com My YouTube Channel: https://www.youtube.com/c/MicroJoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,or in any other way utilizing thi...

CVE-2015-6132

CVE-2015-6132 Microsoft Office / COM Object DLL Planting Original poc: https://www.exploit-db.com/exploits/38968/ Running poc.rtf with mqrt.dll in the same directory will trigger the dll, which in this case pop calc making Down/exec Dll will work as well Exporting the dll to run from Samba/WebDav...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

CVE-2017-0261

CVE-2017-0261 and Exploit Sample Analysis 0x01 Vulnerability Description Cause: When opening an Office document, FLTLDR.EXE is used to render an embedded EPS file containing the vulnerability. The file is written in PostScript language and can be exploited by an attacker through a "save-restore"...

EvilClippy

This tool was released during our BlackHat Asia talk March 28, 2019. A video recording of this talk is available at https://www.youtube.com/watch?v=9ULzZA70Dzg. Evil Clippy A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code via P-Code and...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation root@kitploit: git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : root@kitploit: python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

msmailprobe

msmailprobe Enumeración de Office 365 y Exchange Es ampliamente conocido que OWA Outlook Webapp es vulnerable a ataques de enumeración de usuarios basados en tiempo. Esta herramienta aprovecha todos los servicios conocidos, e incluso algunos menos conocidos, expuestos por instalaciones...

CVE-2022-30190

CVE-2022-30190 Follina Educational Malware Development, Exploitation, Analysis and Mitigation A fully documented proof-of-concept demonstrating the Follina vulnerability - from social engineering delivery through to exploitation, forensic analysis, and patch development. ⚠️ Educational Use Only...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Update 31/05/2022 - CVE-2022-30190 - Follina Now the generator is able to generate the document required to exploit also the "Follina"...

CVE-2023-25292

CVE-2023-25292 Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie Vulnerability Details Product: Group Office Application Version: 6.6.145 Vulnerability Type:...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

Vba2Graph

Vba2Graph A tool for security researchers, who waste their time analyzing malicious Office macros. Generates a VBA call graph, with potential malicious keywords highlighted. Allows for quick analysis of malicous macros, and easy understanding of the execution flow. @MalwareCantFly Features Keywor...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate .docx generate to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. creeate blank docx file. 2. add "Bitmap Iamge" object in "Inert/Object" menu. Add Object...