165816 matches found
HAFNIUM-Microsoft-Exchange-0day
Cool Resources CheckMyOWA What is it? We set up this site to aid victim notification based on lists of compromised Exchange servers with Outlook Web AccessOWA enabled, which were obtained from perpetrators of this mass breach event. This includes affected IPs/domains, as well as whether the actor...
https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...
RDWAtool
A python all-in-one tool to extract information, spray and bruteforce passwords on a Microsoft Remote Desktop Web Access RDWA application. This python tool allows to extract various information from a Microsoft Remote Desktop Web Access RDWA application, such as the FQDN of the remote server, the...
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability This script provides a proof of concept PoC for CVE-2024-21413, a critical security vulnerability discovered in Microsoft Outlook with a CVSS score of 9.8. This vulnerability, dubbed the MonikerLink flaw, has wide-ranging...
windiff
WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...
shim-review
This repo is for review of requests for signing shim. To create a request for review: clone this repo preferably fork it edit the template below add the shim.efi to be signed add build logs add any additional binaries/certificates/SHA256 hashes that may be needed commit all of that tag it with a...
ip-https-tools
ip-https-tools A collection of tools for the IP over HTTPS IP-HTTPS Tunneling Protocol used by Microsoft DirectAccess to send Teredo related IPv6 packets over an IPv4-based HTTPS session. MS-IPHTTPS protocol pecification DirectAccess Technical Overview DirectAccess Requirements DirectAccess...
Windows Server 2003 & IIS 6.0 - Remote Code Execution
Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...
Pallets Werkzeug <0.15.5 - Local File Inclusion
Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. id: CVE-2019-14322 info: name: Pallets Werkzeug 0.15.5 - Local File Inclusion author: madrobot severity: high description: | Pallets Werkzeug...
proxylogon
proxylogon my exploit for the proxylogon chain Microsoft Exchange Server - CVE-2021-26855 Run: the exploit uses Impacket package, to install it run this: user@host:$ python3 -m pip install impacket then clone the exploit repo, and enter the exploit directory: user@host:$ git clone...
TriBell_Edge_SandBox_Escape
TriBellEdgeSandBoxEscape Tribell Edge Sandbox Escape - PoCs of Edge's legacy vulnerabilities BadgeUpdateManager / TileFlyoutUpdateManager / ToastNotificationManager to exploit cross-boundary XmlDocument sharing and escape Edge’s LPAC sandbox CVE-2019-0555. The PoCs trigger the execution of...
ProxyLogon-CVE-2021-26855-metasploit
ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...
CVE-2018-8172
CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 Remote Code Execution Vulnerability http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...
CVE-2022-30190
MS-MSDT Follina CVE-2022-30190 PoC Malicious docx generator to exploit Microsoft Office Word Remote Code Execution Creation of this Script is based on CVE-2021-40444 PoC by LockedByte and writeup by Tothi Using First modify backup.html and replace powershell payload. Right now just pops a calc.ex...
CVE-2022-41040-POC
CVE-2022-41040-POC CVE-2022-41040 - Server Side Request Forgery SSRF in Microsoft Exchange Server Manual exploiation 1. Replace COLLABHERE with your OOB domain - sed 's/COLLABHERE//g 2. Add payloads next to URLs you want to test - echo http://target.com|unfurl format %s://%d/ 3. Visit crafted URL...
MS10-059
This repository does not have a README...
CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-
Microsoft-Windows---srv2.sys-SMB-Code-Execution-Python-MS09-050- Microsoft Windows - 'srv2.sys' SMB Code Execution Python MS09-050 Exploit for CVE-2009-3103 Overview This Python script is an updated version of a public exploit for CVE-2009-3103. The original code relied on the SMB.connection...
CVE-2022-30190
CVE-2022-30190 Microsoft Office Word RCE Reproduction CVE-2022-30190 Vulnerability Overview MS Office docx files may contain external OLE object references as HTML files. There is an HTML scenario ms-msdt: that calls the msdt diagnostic tool, which is capable of executing arbitrary code specified...