48 matches found
CVE-2023-23397-POC-Using-Interop-Outlook
CVE-2023-23397-POC-Using-Interop-Outlook Easy implementation for CVE-2023-23397 exploit POC using Microsoft.Office.Interop.Outlook...
CVE-2023-23397-POC
Two POCs I created for the CVE-2023-23397 NTLM vulnerability. Originally the pocs would send meeting requests with a reminder but I was able to send an email with a reminder that required no interaction from the user. The .ps1 file needs to be run from a compromised windows host with a compromise...
CVE-2023-23397
CVE-2023-23397 - Microsoft Outlook Vulnerability For educational purposes only!...
CVE-2023-23397
This repository does not have a README...
CVE-2023-23397-POC
CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...
CVE-2023-23397-PoC
CVE-2023-23397-PoC C send only version of CVE-2023-23397-POC-Powershell by Oddvar Moe @oddvarmoe Sends email from the address associated with Outlook account. .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path Required. UNC Path -...
CVE-2023-23397-POC
CVE-2023-23397-POC Simple PoC for CVE-2023-23397 vulnerability, payload sent via email...
cve-2023-23397-detection-lab
CVE-2023-23397 Detection & Mitigation Research Lab Overview This project is a defensive cybersecurity research lab focused on the network behavior associated with CVE-2023-23397. The project studies suspicious outbound SMB and NTLM authentication from a Windows endpoint and demonstrates a complet...
CVE-2023-23397
CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using System.Text;...
CVE-2023-23397
This repository does not have a README...
CVE-2023-23397
CVE-2023-23397 CVE-2023-23397 Remediation Script Powershell There are 3 PowerShell scripts. If your patch management software uses an evaluation and a remediation script , use the respective files/scripts. Alternatively, if you wish to just push out the update without the above, the All In One...
CVE-2023-23397_EXPLOIT_0DAY
CVE-2023-23397EXPLOIT0DAY Exploit for the CVE-2023-23397 Credit to domchell EML/MSG Checker for the exploit: !/usr/bin/env python3 from extractmsg import AppointmentMeeting from ..helpers import Status from ..task import Task from ..report import Report from .base import BaseWorker class...
CVE-2023-23397
CVE-2023-23397 A proof of concept for CVE-2023-23397 for security testing. Modify lines 11 and 12 with the attacker UNC path and target email address...
CVE-2023-23397-Patch
CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397 — Purple Team: Exploit + Detection Two halves...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397 Exploitation & Mitigation Demo 📌 Overview...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397 Exploitation & Mitigation Demo 📌 Overview...
Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities
Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor known as APT28, drawing condemnation from the European Union E.U., the North Atlantic Treaty Organization NATO, the U.K., and the U.S. The Cze...
Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware
The Russia-linked nation-state threat actor tracked as APT28 weaponized a security flaw in the Microsoft Windows Print Spooler component to deliver a previously unknown custom malware called GooseEgg. The post-compromise tool, which is said to have been used since at least June 2020 and possibly ...