ntlm_theft

ntlmtheft A tool for generating multiple types of NTLMv2 hash theft files. ntlmtheft is an Open Source Python3 Tool that generates 21 different types of hash theft documents. These can be used for phishing when either the target allows smb traffic outside their network, or if you are already insi...

Static-Malware-Analysis-Follina-CVE-2022-30190

Follina（CVE-2022-30190）静态恶意软件分析 来自 Blue Team Labs Online 的 Follina（CVE-2022-30190）静态恶意软件分析 实验室 ：Blue Team Labs Online – Follina 挑战 分析类型 ：静态分析 使用工具 ：VirusTotal、Windows 文件资源管理器 引言 作为我的蓝队之旅，我想深入了解现实世界中基于文档的攻击。 我遇到了一份名为 sample.doc 的可疑 Microsoft Word 文档，并决定对它进行静态 分析——绝不执行该文件。...

CVE-2018-3982

An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can prevent Atlas from adding elements to an array that is indexed by a loop. When reading from this array, the application will use an...

Nested, Targeted Attacks Built for Reconnaissance

Researchers say members of the North Atlantic Treaty Organization were targeted during the holidays by a unique document-based attack that evades discovery by lying dormant when it detects a security researcher’s test environment. Characteristics of this attack, according to researchers at Cisco...