RTF-Cleaner

RTF-Cleaner Limpia RTF, intenta extraer URL de muestras RTF maliciosas usando CVE-2017-0199 y CVE-2017-8759...

CVE-2017-0199

漏洞利用工具包 CVE-2017-0199 - v4.0 漏洞利用工具包 CVE-2017-0199 - v4.0 是一个方便的 Python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方法来测试 Microsoft Office 远程代码执行（RCE）。它可以生成恶意的 RTF/PPSX 文件，并在无需复杂配置的情况下向受害者投递 metasploit / meterpreter / 其他有效载荷。 免责声明...

CVE-2017-8759

CVE-2017-8759 漏洞利用工具包 - v1.0 CVE-2017-8759 漏洞利用工具包 - v1.0 是一个方便的 Python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方式来测试 Microsoft .NET Framework RCE。它可以生成恶意 RTF 文件，并在无需任何复杂配置的情况下向受害者投递 metasploit / meterpreter / 其他 payload。 免责声明...

CVE-2017-8759

CVE-2017-8759 漏洞利用工具 CVE-2017-8759 漏洞利用工具是一个方便的 Python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方法来测试 Microsoft .NET Framework 远程代码执行（RCE）。它可以生成恶意 RTF 文件，并在无需任何复杂配置的情况下将 metasploit / meterpreter / 其他 payload 传递给受害者。 免责声明...

cve-2017-8760

漏洞利用工具包 CVE-2017-8759 - v1.0 漏洞利用工具包 CVE-2017-8759 - v1.0 是一个方便的 Python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方法来测试 Microsoft .NET Framework 远程代码执行。它可以生成恶意 RTF 文件，并将 metasploit / meterpreter / 其他载荷传递给受害者，无需任何复杂配置。 免责声明 本程序仅供教育目的。未经许可不得使用。通常的免责声明适用，尤其是本人 bhdresh...

CVE-2017-0199

漏洞利用工具包 CVE-2017-0199 - v2.0 漏洞利用工具包 CVE-2017-0199 - v2.0 是一个方便的 Python 脚本，提供快速有效的方法来利用 Microsoft RTF RCE。它可以生成恶意 RTF 文件，并将 metasploit / meterpreter 载荷传递给受害者，而无需任何复杂配置。 视频教程 https://youtu.be/42LjG7bAvpg 发布说明： 脚本引入了以下功能 root@kitploit: - 使用工具包生成恶意 RTF 文件 - 以微型 HTA + Web 服务器模式运行工具包进行利用 版本：Python 版本...

Exploit for Use After Free in Microsoft

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Det...

Patchwork APT caught in its own web

Patchwork is an Indian threat actor that has been active since December 2015 and usually targets Pakistan via spear phishing attacks. In its most recent campaign from late November to early December 2021, Patchwork has used malicious RTF files to drop a variant of the BADNEWS Ragnatela Remote...

Ramsay Malware Targets Air-Gapped Networks

A cyber-espionage malware has been discovered that’s capable of collecting and exfiltrating sensitive documents from within air‑gapped networks. The malware, dubbed Ramsay, is still under active development — so far, researchers have found three different samples, with each sample adding new...

Word Attachment Delivers FormBook Malware, No Macros Required

A new wave of document attacks targeting inboxes do not require enabling macros in order for adversaries to trigger an infection chain that ultimately delivers FormBook malware. Researchers at Menlo Security are reporting a wave of attacks that began last month that are targeting financial and...

Microsoft Office Word Malicious Hta Execution Exploit

This Metasploit module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how an olelink object can make a https request, and execute hta code in response. This bug was originally seen being exploited in the wild...

Exploit for CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy...

Exploit for CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-201...

Microsoft Office Word Malicious Hta Execution

This module creates a malicious RTF file that when opened in vulnerable versions of Microsoft Word will lead to code execution. The flaw exists in how a olelink object can make a https request, and execute hta code in response. This bug was originally seen being exploited in the wild starting in...

MGASA-2015-0016 Updated unrtf package fixes security vulnerability

Updated unrtf package fixes security vulnerability: Hanno Böck also reported a number of other crashes in unrtf besides the ones associated with CVE-2014-9275. These could allow a denial of service when opening a malicious malformed RTF file which causes unrtf to crash...

RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow

RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/11994/info It is reported that rtf2latex2e is susceptible to a stack buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied image data prior to...

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow

Microsoft Windows 9598Enterprise Server 4NT Server 4Terminal Server 4Workstation 4 - Riched Buffer Overflow Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT...