CVE-2025-53770-Scanner

CVE-2025-53770 SharePoint Vulnerability Scanner 100% hacked together with all the tweets floating around with payloads and different attacks, so comes with zero warranty etc. The scanner is designed to identify vulnerable instances and has a config with known uses in the wild of exploitation, it'...

CVE-2025-53770

Exploit RCE de SharePoint ToolPane Kit de herramientas de investigación de seguridad para probar vulnerabilidades de SharePoint ToolPane Descripción general • Características • Primeros pasos • Uso • Estructura del proyecto Este repositorio contiene exploits de prueba de concepto y herramientas d...

CVE-2025-53770

CVE-2025-53770 Research Lab This repository appears to be a proof-of-concept research project for validating a SharePoint-style deserialization and tool-pane processing issue in a controlled lab. It includes a Python driver, a mock vulnerable application, and container assets for isolated testing...

📄 Microsoft SharePoint Server ToolPane Authentication Bypass / Unsafe Deserialization

Proof of concept exploit for Microsoft SharePoint server that chains authentication bypass with unsafe deserialization to achieve complete system compromise without authentication...

Exploit for Deserialization of Untrusted Data in Microsoft

🚀 SharePoint CVE-2025-53770 RCE Vulnerability Checker !Licen...

Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)

Exploit Title: Microsoft SharePoint Server 2019 – Remote Code Execution RCE Google Dork: intitle:"Microsoft SharePoint" inurl:"/layouts/15/ToolPane.aspx" Date: 2025-08-07 Exploit Author: Agampreet Singh RedRoot Tool Maker – https://github.com/Agampreet-Singh/RedRoot Vendor Homepage:...

Metasploit Wrap-Up 08/08/25

New module content 4 ICTBroadcast Unauthenticated Remote Code Execution Author: Valentin Lobstein Type: Exploit Pull request: 20446 contributed by Chocapikk Path: linux/http/ictbroadcastunauthcookie AttackerKB reference: CVE-2025-2611 Description: This adds a new module for CVE-2025-2611 -...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthentica...

Exploit for Deserialization of Untrusted Data in Microsoft

SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-R...

(Pwn2Own) Microsoft SharePoint ToolPane Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ToolPane endpoint. The application does not adequately restrict access to a...

📄 SharePoint Remote Code Execution

This payload is an HTTP request example of the SharePoint remote code execution vulnerability being exploited in the wild. POST /layouts/15/ToolPane.aspx?DisplayMode=Edit&a=/ToolPane.aspx HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:120.0 Gecko/20100101...

Exploit for Deserialization of Untrusted Data in Microsoft

📌 SharePoint WebPart Injection Exploit Toolkit 🍕 Exploit too...

Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell)

This module exploits the authentication bypass vulnerabilities CVE-2025-49706 and CVE-2025-53771, and an unsafe deserialization vulnerability CVE-2025-49704, to achieve unauthenticated RCE against a vulnerable Microsoft SharePoint Server. The vulnerability CVE-2025-53770 was disclosed as being a...

(Pwn2Own) Microsoft SharePoint ToolPane Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Referer HTTP header provided to the ToolPane endpoint. The...