CVE-2025-24071

CVE-2025-24071 This Python script is designed to demonstrate the CVE-2025-24071 vulnerability in Windows Explorer. This vulnerability allows an attacker to capture netNTLMv2 credentials from a victim without any direct interaction from the victim. Description The CVE-2025-24071 vulnerability exis...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Vulnerabilidad de Moniker Link en Microsoft Outlook Resumen Este repositorio documenta mi análisis práctico de CVE-2024-21413 Moniker Link , una vulnerabilidad crítica de Microsoft Outlook que evade la Vista Protegida para filtrar credenciales NetNTLMv2 de Windows mediante...

CVE-2025-24071_PoC

CVE-2025-24071 / CVE-2025-24054 PoC Nota: MICROSOFT HA RENOMBRADO CVE-2025-24071 COMO CVE-2025-24054 🤔 Resumen Esta vulnerabilidad de Windows, específicamente en 'explorer.exe', nos permite recibir un hash NetNTLMv2 de una víctima simplemente con que el atacante extraiga un archivo .zip. Uso...

cve-2024-21413-outlook-monikerlink-lab

CVE-2024-21413 — Outlook Moniker Link Lab / PoC Educational lab notes and a small Proof of Concept PoC demonstrating the CVE-2024-21413 attack flow in a controlled environment TryHackMe-style lab. ⚠️ For educational purposes only. Do not use against systems you don’t own or have explicit permissio...

Email-exploit-Moniker-Link-CVE-2024-21413-

Exploit de correo electrónico Moniker Link-CVE-2024-21413-Module — Documentación Resumen: Un PoC práctico que demuestra el uso de un Moniker Link en un correo HTML para desencadenar una conexión SMB desde Outlook, permitiendo capturar el hash netNTLMv2 de la víctima mediante Responder. Esto...

icebreaker

icebreaker 打破那个可爱的Active Directory环境的冰。当你孤独寒冷地凝视着一个Active Directory派对，却连一个AD凭据都没有，无法加入狂欢时，这个工具就是为你准备的。 它依次自动化执行5种针对Active Directory的内部网络攻击，为你交付明文凭据。使用--auto选项，可在获得立足点后自动获取域管理员权限。 概要详情 以下攻击按顺序执行，直至第四和第五种攻击（它们并行且无限期运行）。 反向暴力破解 自动获取用户名列表，并用两个最常见的AD密码（超过两次尝试可能触发账户锁定策略）逐一测试 上传到网络共享...

CVE-2023-23397

CVE-2023-23397 PoC simple y sucio de la vulnerabilidad CVE-2023-23397 que afecta al cliente pesado de Outlook. Descripción Outlook sufre de una falta de control sobre la entrada del usuario que permite configurar el sonido de una reunión y recordatorio de cita. De hecho, un atacante puede forzar ...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 es una vulnerabilidad crítica de ejecución remota de código en Microsoft Outlook versiones que incluyen Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 antes del parche de febrero de 2024. Permite a un atacante no autenticado eludir la Vista Protegida de Outlook enviando un...

CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

hashmuncher

Hash Muncher Cattura hash NetNTLMv2 usando ETW con diritti amministrativi su Windows Richiede accesso elevato amministratore su Windows 8.1 / Windows 2016 o successivi Usa Event Tracing for Windows ETW per ottenere accesso ai dati grezzi dei pacchetti per i pacchetti di autenticazione SMB...

Moniker-Link-Lab-Setup

Configurazione del Laboratorio Moniker Link - CVE-2024-21413 🎯 Panoramica del Progetto Laboratorio pratico di penetration testing che dimostra lo sfruttamento del moniker link CVE-2024-21413 per il furto di credenziali NTLM. Questo progetto documenta l'intera catena di attacco, dalla configurazio...

lab-SMB-responder-CVE-2024-21413

Laboratorio SMB + Responder CVE-2024-21413 🎯 Obiettivo Questo progetto ha avuto lo scopo di studiare la vulnerabilità CVE-2024-21413 MonikerLink, esplorando come il protocollo SMB/NTLM possa essere abusato per la cattura di credenziali. Anche dopo la correzione ufficiale di Microsoft, il...

Microsoft - NTLMv2 Hash Capture

Titles: Microsoft - NTLMv2 Hash Capture Author: nu11secur1ty Date: 2026-05-27 Vendor: Microsoft Software: Windows Shell File Explorer Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-32202 Description: A spoofing vulnerability in Windows Shell File Explorer allows an attacker to capture NTLMv...

EUVD-2017-6447

Malware in sbrugna...

EUVD-2024-17009

Malicious code in bioql PyPI...

EUVD-2024-17008

Malicious code in bioql PyPI...

EUVD-2023-2717

Malicious code in bioql PyPI...

CVE-2024-1244

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2024-1243

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...

CVE-2024-1244

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...