cve-2021-40444

cve-2021-40444 Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444 Files including malicious word and cab-file may be downloaded on any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Note! The domain name in the original malicious...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...

CVE-2023-21716

CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption https://twitter.com/jduck A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as a...

CVE-2017-11882

CVE-2017-11882 Exploit CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum. For remote command execution,this exploit will call WinExec with SWHIDE and call ExitProcess after WinExec returns. For remote code execution,this exploit just jmp to code. I cannot find a reference...

CVE-2023-21716-POC

History In February 2023, Microsoft patched a critical vulnerability in Microsoft Word, identified as CVE-2023-21716 with a CVSS score of 9.8, which could allow attackers to execute remote code without authentication. This vulnerability also affected the Outlook Preview Pane, meaning it can be...

CVE-2021-40444-exp

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2023-21716-Analysis-ICT287

CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Execution Overview This repository documents the analysis and reproduction of CVE-2023-21716, a heap-based buffer overflow vulnerability in Microsoft Word's RTF parser with a CVSS score of 9.8 Critical. What's Inside File| Description...

Follina-CVE-and-CVE-2021-40444

Exploiting Follina CVE and CVE-2021-40444 Vulnerabilities Table of Contents 1. Introduction 2. Prerequisites 3. Setup and Installation 4. Usage 5. Detailed Explanation 6. Commands 7. Disclaimer Introduction This repository contains scripts and resources for exploiting the Follina CVE and...

CVE-2022-30190

CVE-2022-30190 aka Follina Vulnerability Description Follina exists in the Microsoft Support Diagnostic Tool MSDT. When an application calls MSDT via a URL protocol for support, a remote code execution vulnerability occurs. Successful exploitation allows an attacker to execute arbitrary code with...

Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

AmzWord

AmzWord an automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography Thanks to the following github repository, we referenced and modified part of the code to integrate and implement our work: gdog follina virtual-reality 中文README请看这里 Requirements gdog： Python 2....

CVE-2021-40444

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...

CVE-2021-40444

Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

[SECURITY] Fedora 45 Update: abiword-3.0.8-6.fc45

AbiWord is a cross-platform Open Source word processor. It is full-featured, while still remaining lean...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

dorky

Dorky Dorky is a command-line tool that searches GitHub and GitLab for matches in organization names, repository names, and usernames based on a list of input words. This tool can be helpful in identifying potential targets for security assessments, finding interesting projects, and discovering n...