o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate .docx generate to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. creeate blank docx file. 2. add "Bitmap Iamge" object in "Inert/Object" menu. Add Object...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure to send the doc or rtf file t...

EUVD-2026-92421

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

MS14-068

This repository does not have a README...

Microsoft365_devicePhish

Microsoft365devicePhish Abusando del flujo de autorización OAuth de Microsoft 365 para ataques de phishing Este es un script simple de prueba de concepto que permite a un atacante realizar un ataque de phishing contra el flujo de autorización OAuth de Microsoft 365. Usando esto, uno puede...

warbird-docs

Warbird Docs Documentation of Microsoft's Warbird obfuscation Modern Warbird Windows 10 1703+...

CVE-2021-40444

Microsoft MSHTML 원격 코드 실행 취약점 CVE-2021-40444 개별 시스템에서 ActiveX 컨트롤을 비활성화하는 방법? 1. 모든 영역에서 Internet Explorer의 ActiveX 컨트롤 설치를 비활성화하려면 다음을 텍스트 파일에 붙여넣고 .reg 파일 확장자로 저장하세요: Windows Registry Editor Version 5.00 HKEYLOCALMACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

rdpscan

rdpscan para la vulnerabilidad CVE-2019-0708 bluekeep Este es un escáner rápido y sencillo para la vulnerabilidad CVE-2019-0708 en Escritorio Remoto de Microsoft. En este momento, hay alrededor de 900.000 máquinas en Internet público vulnerables a esta vulnerabilidad, por lo que muchos esperan un...

cve-2021-1647

CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability INFO Password:infected...

CVE-2022-41040-POC

CVE-2022-41040-POC CVE-2022-41040 - Server Side Request Forgery SSRF in Microsoft Exchange Server Manual exploiation 1. Replace COLLABHERE with your OOB domain - sed 's/COLLABHERE//g 2. Add payloads next to URLs you want to test - echo http://target.com|unfurl format %s://%d/ 3. Visit crafted URL...

AzureGraph

AzureGraph AzureGraph es una herramienta de recopilación de información de Azure AD a través de Microsoft Graph. Gracias a la tecnología de Microsoft Graph, es posible obtener todo tipo de información de Azure AD, como usuarios, dispositivos, aplicaciones, dominios y mucho más. Esta aplicación...

CVE-2026-69836-EXP

CVE-2026-69836 Entra ID Unauthenticated RCE Proof of Concept Overview CVE-2026-69836 is a critical unauthenticated remote code execution vulnerability in Microsoft Entra ID due to improper deserialization of untrusted data CWE-502. The flaw allows attackers to execute arbitrary code over the...

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com...

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

CVE-2026-104808

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...

Deathnote

Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...