LittleCorporal

LittleCorporal LittleCorporal: A C Automated Maldoc Generator C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ \ //|| | / /|| // / / /...

macos_sandbox

Introduction to macOS - the App sandbox Continuing with my transition to macOS blogpost series, I'd like to discuss a bit about the macOS App sandbox. It is highly recommended to read the macOS App structure blogpost first - I will be assuming the reader knows the difference between Apps, process...

DDEtect

DDEtect Written by Amit Serper, @0xAmit DDEtector is a simple DDE object detector written in python Currently supports only word DOCX and legacy DOC files Prints the contents of the DDE payloads Note: In some cases DDEtect won't print the entire DDE payload. I'm working on writing a better matchi...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

Follina-CVE-2022-30190-POC

Follina-CVE-2022-30190 Proof of Concept by Nee Usage python3 follina.py --payload-url "http://192.168.200.144:1337/pwn.html" What it does Creates a malicious word file which points to the payload url that you specify Hosts the default payload located in the web folder Proof Of Concept Pops calc b...

five-nights-at-follina-s

Five Nights at Follina's A Fullstack Academy Cybersecurity project examining the full cycle of the Follina CVE-2022-30190 vulnerability, from exploit to detection and defense. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu This set of tools assumes that you have a web host or can...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

CVE-2018-8174

CVE-2018-8174 MS Word MS WordPad via IE VBS Engine RCE MS Word and MS WordPad RCE via IE VBS RCE https://github.com/smgorelik/Windows-RCE-exploits/tree/master/Web/VBScript Save the index.html to webserver then use the python script to generate RTF Exploit Shellcode is static Down\Exec Putty.exe...

gophish

Gophish fork This is a fork of Gophish: Open-Source Phishing Toolkit Gophish New features This fork has a focus on running real-life phishing campaigns for a single customer. The following features are added: Script to automatically setup a fully configured Gophish instance on a fresh VPS. This...

Malware-Analysis-Follina-CVE-2022-30190

Malware-Analysis-Follina-CVE-2022-30190 Static Malware Analysis – Follina Exploitation CVE-2022-30190 Malicious Microsoft Word Document Investigation During a practical malware analysis session on Kali Linux, I encountered a suspicious file named sample.doc. I decided to perform a structured stat...

backdoorppt

backdoorppt - 'Office spoof extensions tool' Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...

phishery

phishery Phishery is a Simple SSL Enabled HTTP server with the primary purpose of phishing credentials via Basic Authentication. Phishery also provides the ability easily to inject the URL into a .docx Word document. The power of phishery is best demonstrated by setting a Word document's template...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate .docx generate to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. creeate blank docx file. 2. add "Bitmap Iamge" object in "Inert/Object" menu. Add Object...

CVE-2022-30190

CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...

CVE-2023-21716

CVE-2023-21716 POC : CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption...

knowsmore

Knows More KnowsMore prend officiellement en charge Python 3.8+. Fonctionnalités principales Importer les hachages NTLM depuis un fichier texte .ntds généré par CrackMapExec ou secretsdump.py Importer les hachages NTLM depuis NTDS.dit et SYSTEM Importer les hachages NTLM craqués depuis un fichier...

Deathnote

Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...

WordListGen

WordListGen Super Simple Python Word List Generator for Password Cracking Hashcat! I know what your are thinking. Why create another word list generator? Well, I needed something very simple I could modify on the fly to get the exact character generators for the task at hand. This script is fully...

duplicut

Duplicut :scissors: Dédupliquez rapidement des listes de mots massives, sans en changer l'ordre Créé par nil0x42 et contributeurs 📖 Aperçu De nos jours, la création de listes de mots de passe implique généralement la concaténation de multiples sources de données. Idéalement, les mots de passe les...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote cod...