165811 matches found
Email-exploit-Moniker-Link-CVE-2024-21413-
Email exploit Moniker Link-CVE-2024-21413-Module — Documentation Overview: A practical PoC demonstrating the use of a Moniker Link in an HTML email to trigger an SMB connection from Outlook, allowing capture of a victim's netNTLMv2 hash via Responder. This showcases practical skills in penetratio...
CVE-2017-11882-exp
CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ salute, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...
wesng
Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2018-0802
CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch exploitation and patch video: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 blog post...
CVE-2022-30190-Analysis-With-LetsDefends-Lab
CVE-2022-30190-Analysis-With-LetsDefends-Lab On May 27, 2022, the NaoSec technical team attempted to analyze and discovered a document in .doc format that appeared malicious. The document was indicated to have been uploaded from an IP address in Belarus. This suspicion was further traced and on M...
azureOutlookC2
Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...
Sentinel-Queries
KQL for Microsoft Sentinel Some tips, tricks and examples for using KQL for Microsoft Sentinel. 1. Introduction 2. The Anatomy of a KQL Query 3. The Basics 1. Time Basics 2. Where Basics 3. Project Basics 4. Summarize Basics 5. Render Basics 6. Parse and Split Basics Introduction Kusto Query...
MSMQ-Vulnerability
MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...
poc_proxylogon
pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 This is script was originaly made by celesian to exploit this CVE. Then i updated it to exploit an exchange server vulnerable to SSRF but it got a Shell exploiting the EWS feature, because a client company patched it's exchange server...
CVE-2026-41091
🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...
BlueKeep
rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 700,000 machines on the public Internet vulnerable to this vulnerability, compared to about 2,000,000 machines that have Remote...
Microsoft-Word-CVE-2017-0199-
Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...
cve-2017-8760
Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
CVE-2022-30190
CVE-2022-30190 Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability MSRC / By msrc / May 30, 2022 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability...
CVE-2021-26700
CVE-2021-26700 Note: this manual is valid for DSNS lab's members only. Intruduction This is a remote code execution RCE vulnerability that resided in an extension of Visual Studio Code VS Code called npm, which was developed by Microsoft and was aimed to support running the npm scripts defined in...
AzureADAssessment
Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...