CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

OWA-Password-Sprayer

OWA-Password-Sprayer OWA Password Sprayer This Python script facilitates password spraying against Outlook Web Access OWA endpoints. Password spraying is a technique used to test a single password against multiple usernames, aiming to find valid credentials for accessing the OWA. Features: Suppor...

CVE-2024-21413

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...

CVE-2021-26855-Scanner

CVE-2021-26855-Scanner Scanner and PoC for CVE-2021-26855 Credit to GreyOrder for the PoC. Reuploading for convenience and because Microsoft took it down at least once : Example of usage for mass scanning: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability PoC This script showcases a proof of concept PoC for CVE-2024-21413, a critical security flaw identified in Microsoft Outlook with a CVSS score of 9.8. Dubbed the MonikerLink exploit, this vulnerability carries extensive consequences, such as...

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability This script provides a proof of concept PoC for CVE-2024-21413, a critical security vulnerability discovered in Microsoft Outlook with a CVSS score of 9.8. This vulnerability, dubbed the MonikerLink flaw, has wide-ranging...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

monikerlink-cve-2024-21413-writeup

Moniker Link CVE-2024-21413 Writeup Writeup from TryHackMe's Moniker Link room: exploiting CVE-2024-21413 to bypass Outlook's Protected View and capture a victim's NTLMv2 hash via a crafted Moniker Link. Part of my ongoing OSCP-prep practice. Contents monikerlink-cve-2024-21413-writeup.md: the...

CVE-2023-23397_EXPLOIT

CVE-2023-23397 MS Outlook Vulnerability Exploitation CVE-2023-23397 is a vulnerability in Microsoft Outlook that allows an attacker to potentially exfiltrate user authentication details. The vulnerability stems from the ability of an attacker to specify a Universal Naming Convention UNC path in t...

CVE-2023-23397-PoW

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application. For educational and research puproses only. CVE-2023-23397 preview This CVE aimed to retrieve NetNTLM hash logged in user from Microsoft Outlook client version 2016 except last patched version...

HAFNIUM-Microsoft-Exchange-0day

Cool Resources CheckMyOWA What is it? We set up this site to aid victim notification based on lists of compromised Exchange servers with Outlook Web AccessOWA enabled, which were obtained from perpetrators of this mass breach event. This includes affected IPs/domains, as well as whether the actor...

CVE-2024-21413

Exploitation of CVE-2024-21413 Outlook Project status: On hold incomplete practice; failed to capture NTLM hashes Objectives Attempt to exploit vulnerability CVE-2024-21413, which allows leakage of NTLM hashes in Outlook when interacting with malicious links. The goal of the practice was not to...

thm-Moniker-Link-cve-2024-21413-writeup

TryHackMe: Moniker Link CVE-2024-21413 Path: Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 Difficulty: Premium room Focus: Outlook Protected View bypass, NTLM hash leaking, and credential capture with Responder CVE-2024-21413 is a critical Microsoft Outlook vulnerability...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using System.Text;...

outlook-auto-register

Outlook Auto Register Pure-protocol Microsoft Outlook bulk registration · PerimeterX solver · Web console · Proxy pool / account pool / liveness checks What it solves · Screenshots · Quick start · Proxy · Anti-ban guide · 中文 · Tiếng Việt Repository : lxf746/outlook-auto-register For learning and...

CVE-2019-1218

CVE-2019-1218 Outlook iOS Spoofing Vulnerability I discovered XSS in IOS Outlook Mobile Application. A severe vulnerability in Microsoft Outlook for IOS that could allow an attacker to takeover a victim’s device. The security issue could enable a malicious actor to execute a cross-site scripting...

tryhackme-moniker-link

tryhackme-moniker-link Documentation of my hands-on lab Moniker Link CVE-2024-21413 completed on TryHackMe. Moniker Link CVE-2024-21413 — TryHackMe Lab Overview This repository documents my hands-on study in a TryHackMe room. The goal of this exercise was to understand how the vulnerability works...