CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: root@kitploit: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver =...

CVE-2023-23397-PoW

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application. For educational and research puproses only. CVE-2023-23397 preview This CVE aimed to retrieve NetNTLM hash logged in user from Microsoft Outlook client version 2016 except last patched version...

Tangled

Tangled Tangled is a phishing platform designed from an offensive security perspective. It automates many of the aspects of social engineering campaigns delivery and weaponizes iCalendar rendering features in Microsoft Outlook & Gmail Google Workspace to deliver spoofed meeting invites that are...

cve-2024-21413-outlook-monikerlink-lab

CVE-2024-21413 — Outlook Moniker Link Lab / PoC Educational lab notes and a small Proof of Concept PoC demonstrating the CVE-2024-21413 attack flow in a controlled environment TryHackMe-style lab. ⚠️ For educational purposes only. Do not use against systems you don’t own or have explicit permissio...

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit CVE-2024-21413 Microsoft Outlook RCE Exploit...

CVE-2023-23397

Un PoC simple en PowerShell para CVE-2023-23397 CVE-2023-23397 es una vulnerabilidad en MS Outlook que permite a un atacante potencialmente exfiltrar detalles de autenticación del usuario. La vulnerabilidad se relaciona con la capacidad de un atacante de especificar una ruta UNC en la propiedad...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example root@kitploit: sudo python3 CVE-2024-21413....

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

Moniker-Link-CVE-2024-21413-

Moniker-Link-CVE-2024-21413- On February 13th, 2024, Microsoft announced a Microsoft Outlook RCE & credential leak vulnerability with the assigned CVE of CVE-2024-21413 Moniker Link. Haifei Li of Check Point Research is credited with discovering the vulnerability. The vulnerability bypasses...

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- El 13 de febrero de 2024, Microsoft publicó una grave vulnerabilidad de seguridad en Microsoft Outlook, identificada como CVE-2024-21413 y conocida como Moniker Link Vulnerability. La vulnerabilidad permite a un atacante eludir el mecanismo...

CVE-2023-23397

CVE-2023-23397 PoC de CVE-2023-23397 en C 1- descargar el msgkit 2- editar la clase appointment y añadir lo siguiente: 3- crear una nueva clase dentro del proyecto para establecer las propiedades del archivo msg: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic;...

CVE-2023-23397

CVE-2023-23397 - Microsoft Outlook Vulnerability For educational purposes only!...

CVE-2024-21413

CVE-2024-21413 | PoC de Vulnerabilidad de Ejecución Remota de Código en Microsoft Outlook 🚀 Uso Asegúrate de tener los permisos y la autorización adecuados del propietario del sistema objetivo antes de usar este script. Requisitos previos Python 3.x impacket-smbserver Ejemplo de uso root@kitploit...

CVE-2023-23397

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook CVE-2023-23397 is a remote code execution vulnerability in Microsoft Outlook, a popular email client used by millions of users worldwide. This vulnerability was discovered by security researcher Leandro Costa and reported to...

CVE-2024-21413

Explotación de CVE-2024-21413 Outlook Estado del proyecto: En pausa práctica incompleta; no se logró capturar hashes NTLM Objetivos Intentar explotar la vulnerabilidad CVE-2024-21413, que permite la fuga de hashes NTLM en Outlook al interactuar con enlaces maliciosos. El objetivo de la práctica n...

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Script functions to either send or save calendar NTLM leakage using the ReminderSoundFile option. Run script to load the functions in Powershell, then you can use the examples below as a starting point for using the functions. Requires to be run on a Windows machine...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability This script provides a proof of concept PoC for CVE-2024-21413, a critical security vulnerability discovered in Microsoft Outlook with a CVSS score of 9.8. This vulnerability, dubbed the MonikerLink flaw, has wide-ranging...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...