RTF-Cleaner

RTF-Cleaner RTF Cleaner، يحاول استخراج عنوان URL من عيّنات RTF الخبيثة باستخدام CVE-2017-0199 & CVE-2017-8759...

CVE-2017-8759

مجموعة أدوات استغلال CVE-2017-8759 - v1.0 مجموعة أدوات استغلال CVE-2017-8759 - v1.0 هي نص بايثون مفيد يوفر لمختبري الاختراق وباحثي الأمن طريقة سريعة وفعالة لاختبار تنفيذ التعليمات البرمجية عن بعد RCE في إطار عمل Microsoft .NET Framework. يمكنه إنشاء ملف RTF ضار وتسليم حمولة metasploit / meterpret...

CVE-2017-0199

أداة الاستغلال CVE-2017-0199 - v4.0 أداة الاستغلال CVE-2017-0199 - v4.0 هي سكريبت بايثون مفيد يوفر لمختبر الاختراق والباحثين الأمنيين طريقة سريعة وفعالة لاختبار تنفيذ الأوامر عن بعد RCE في Microsoft Office. يمكنها إنشاء ملف RTF/PPSX خبيث وتوصيل حمولة metasploit / meterpreter / غيرها إلى الضحية دو...

CVE-2017-0199

مجموعة أدوات الاستغلال CVE-2017-0199 - الإصدار 2.0 مجموعة أدوات الاستغلال CVE-2017-0199 - الإصدار 2.0 هي سكربت بايثون عملي يوفر طريقة سريعة وفعالة لاستغلال ثغرة تنفيذ الأوامر البرمجية عن بُعد RCE في Microsoft RTF. يمكنها توليد ملف RTF خبيث وتسليم حمولة metasploit / meterpreter إلى الضحية دون أي...

CVE-2017-8759

Outil d'exploitation CVE-2017-8759 L'outil d'exploitation CVE-2017-8759 est un script Python pratique qui fournit aux pentesters et aux chercheurs en sécurité un moyen rapide et efficace de tester la RCE de Microsoft .NET Framework. Il peut générer un fichier RTF malveillant et distribuer une...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 — это удобный скрипт на Python, который предоставляет пентестерам и исследователям безопасности быстрый и эффективный способ тестирования RCE в Microsoft .NET Framework. Он позволяет создать вредоносный RTF-файл и доставить...

Exploit for Use After Free in Microsoft

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...

Patchwork APT caught in its own web

Patchwork is an Indian threat actor that has been active since December 2015 and usually targets Pakistan via spear phishing attacks. In its most recent campaign from late November to early December 2021, Patchwork has used malicious RTF files to drop a variant of the BADNEWS Ragnatela Remote...

Ramsay Malware Targets Air-Gapped Networks

A cyber-espionage malware has been discovered that’s capable of collecting and exfiltrating sensitive documents from within air‑gapped networks. The malware, dubbed Ramsay, is still under active development — so far, researchers have found three different samples, with each sample adding new...

Word Attachment Delivers FormBook Malware, No Macros Required

A new wave of document attacks targeting inboxes do not require enabling macros in order for adversaries to trigger an infection chain that ultimately delivers FormBook malware. Researchers at Menlo Security are reporting a wave of attacks that began last month that are targeting financial and...

Microsoft Office Word Malicious Hta Execution Exploit

This Metasploit module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how an olelink object can make a https request, and execute hta code in response. This bug was originally seen being exploited in the wild...

Exploit for CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy...

Exploit for CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-201...

Microsoft Office Word Malicious Hta Execution

This module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how a olelink object can make a https request, and execute hta code in response. This bug was originally seen being exploited in the wild starting in...

MGASA-2015-0016 Updated unrtf package fixes security vulnerability

Updated unrtf package fixes security vulnerability: Hanno Böck also reported a number of other crashes in unrtf besides the ones associated with CVE-2014-9275. These could allow a denial of service when opening a malicious malformed RTF file which causes unrtf to crash...

RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow

RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/11994/info It is reported that rtf2latex2e is susceptible to a stack buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied image data prior to...

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT...