CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2023-21716-POC

Historia En febrero de 2023, Microsoft parcheó una vulnerabilidad crítica en Microsoft Word, identificada como CVE-2023-21716 con una puntuación CVSS de 9.8, que podría permitir a atacantes ejecutar código remoto sin autenticación. Esta vulnerabilidad también afectaba al Panel de Vista Previa de...

2017-11882_Generator

CVE-2017-11882 Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Office cuando el software no logra manejar correctamente objetos en memoria. Un atacante que explotara con éxito esta vulnerabilidad podría ejecutar código arbitrario en el contexto del usuario...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

CVE-2021-26855-d

Basic usage:python owamails.py -u -l -p optional arguments: -h, --help show this help message and exit -u URL, --url URL Url, provide schema and not final / eg https://example.org -l LIST, --list LIST Users mailbox list -p PATH, --path PATH Path to write emails in xml format -f FQDN, --fqdn FQDN...

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit Exploit de RCE para Microsoft Outlook CVE-2024-21413...

CVE-2023-36802

CVE-2023-36802 Caso ITW de CVE-2023-36802 Explicación Usando la primitiva de sobrescritura de PreviousMode https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 Agradecimientos chompie Google Project 0...

CVE-2023-23397_EXPLOIT_0DAY

CVE-2023-23397EXPLOIT0DAY Exploit for the CVE-2023-23397 Credit to domchell EML/MSG Checker for the exploit: !/usr/bin/env python3 from extractmsg import AppointmentMeeting from ..helpers import Status from ..task import Task from ..report import Report from .base import BaseWorker class...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

CVE-2023-23397_EXPLOIT

Explotación de la Vulnerabilidad CVE-2023-23397 en MS Outlook CVE-2023-23397 es una vulnerabilidad en Microsoft Outlook que permite a un atacante potencialmente exfiltrar detalles de autenticación de usuario. La vulnerabilidad surge de la capacidad de un atacante de especificar una ruta de...

cve-2023-23397

CVE-2023-23397 Este script permite crear correos electrónicos de Outlook codificados en TNEF con la carga útil del exploit CVE-2023-23397 y enviarlos a través de SMTP puro, sin necesidad de objetos COM ni EWS. No pude lograr que la clase de mensaje IPM.Schedule.Meeting.Request funcionara...

CVE-2018-8495-POC

CVE-2018-8495 POC Simple poc of CVE-2018-8495 Microsoft Edge Remote Code Execution saurce : https://leucosite.com/Microsoft-Edge-RCE/...

ProxyLogon-CVE-2021-26855

ProxyLogon-CVE-2021-26855 RCE exploit for ProxyLogon vulnerability in Microsoft Exchange Working with Python 3.9 Usage: python proxylogonrce.py target email command Example: python proxylogonrce.py 192.168.227.137 [email protected] whoami All credits go to DEVCORE, based on...

follina

follina POC All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools MSDT on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence. Usage usage: follina.py -h --command COMMA...

cve-2020-0796

Identificación y mitigación de la vulnerabilidad CVE-2020–0796 sobre la marcha CVE-2020–0796 es una vulnerabilidad de ejecución remota de código previa que reside en el protocolo de comunicación de red Server Message Block 3.0 SMBv3, el cual Microsoft no abordará como parte del martes de parches ...

CVE-2023-21707

CVE-2023-21707 Exchange deserialization payload generation .\ConsoleApp1.exe "calc"...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure to send the doc or rtf file t...

EUVD-2026-92421

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

CVE-2022-41040-POC

CVE-2022-41040-POC CVE-2022-41040 - Server Side Request Forgery SSRF en Microsoft Exchange Server Explotación manual 1. Reemplaza COLLABHERE con tu dominio OOB - sed 's/COLLABHERE//g 2. Añade payloads junto a las URLs que quieras probar - echo http://target.com|unfurl format %s://%d/ 3. Visita la...

CVE-2026-69836-EXP

CVE-2026-69836 Entra ID Unauthenticated RCE Proof of Concept Overview CVE-2026-69836 is a critical unauthenticated remote code execution vulnerability in Microsoft Entra ID due to improper deserialization of untrusted data CWE-502. The flaw allows attackers to execute arbitrary code over the...