CVE-2017-8570

क्या? इस रिपॉजिटरी में CVE-2017-8570, उर्फ "Composite Moniker" कमज़ोरी के लिए एक Proof of Concept एक्सप्लॉइट है। यह Packager.dll ट्रिक का उपयोग करके %TEMP% निर्देशिका में एक sct फ़ाइल ड्रॉप करने और फिर कमज़ोरी द्वारा प्रदान किए गए प्रिमिटिव का उपयोग करके इसे निष्पादित करने का प्रदर्शन करता है।...

CVE-2017-8570

المصدر: https://www.exploit-db.com/exploits/44263/ طريقة الاستخدام: python packagercompositemoniker.py -s calc.sct -o example.rtf ما هذا؟ يحتوي هذا المستودع على استغلال إثبات مفهوم لثغرة CVE-2017-8570، المعروفة أيضًا باسم "Composite Moniker". يوضح هذا استخدام خدعة Packager.dll لإسقاط ملف sct في...

CVE-2017-8570

ما هذا؟ يحتوي هذا المستودع على استغلال إثبات المفهوم لثغرة CVE-2017-8570، والمعروفة أيضًا بثغرة "Composite Moniker". يوضح هذا استخدام خدعة Packager.dll لإسقاط ملف sct في دليل %TEMP%، ثم تنفيذه باستخدام البدائية التي توفرها الثغرة. لماذا؟ لعدة أسباب. 1. أردت معرفة ما إذا كان من الممكن استخدام خدعة...

Microsoft Office - Composite Moniker Remote Code Execution Exploit

Exploit for windows platform in category local exploits What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using the...

Microsoft Office - 'Composite Moniker Remote Code Execution

What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using the primitive that the vulnerability provides. Download:...

Microsoft Office - Composite Moniker Remote Code Execution

Microsoft Office - Composite Moniker Remote Code Execution What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using th...

CVE-2 0 1 4-6 3 5 2 vulnerability and targeted attacks sample analysis-vulnerability warning-the black bar safety net

Primer People do,day in look. Recent 3 6 0 days eye the lab captured an example for India the orientation of the attack of the sample,the sample advantage of the sandworm vulnerability patch bypass Vulnerability CVE-2 0 1 4-6 3 5 2,was analyzed after confirmation, we think this is Trend Micro in...

Windows OLE Package Manager SandWorm Exploit

No description provided by source. !/usr/bin/env python import os import zipfile import sys ''' Full Exploit: http://www.exploit-db.com/sploits/35019.tar.gz Very quick and ugly SandWorm CVE-2014-4114 exploit builder Exploit Title: CVE-2014-4114 SandWorm builder Built to run on: Linux/MacOSX Date:...

Microsoft Windows - OLE Package Manager SandWorm

!/usr/bin/env python import os import zipfile import sys ''' Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35019.tar.gz Very quick and ugly SandWorm CVE-2014-4114 exploit builder Exploit Title: CVE-2014-4114 SandWorm builder Built to run on:...

MS14-060 Microsoft Windows OLE Package Manager Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS14-060 Microsoft Windows OLE Package Manager Code Execution", 'Description' = %q This module exploits a vulnerability found in...

MS14-060 Microsoft Windows OLE Package Manager Code Execution

This module exploits a vulnerability found in Windows Object Linking and Embedding OLE allowing arbitrary code execution, publicly known as "Sandworm". Platforms such as Windows Vista SP2 all the way to Windows 8, Windows Server 2008 and 2012 are known to be vulnerable. However, based on our...