53 matches found
Moniker-Link--CVE-2024-21413-
🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...
malicious-pdf
Generador de PDF malicioso ☠️ Genera 67 archivos PDF maliciosos de prueba para probar devoluciones de llamada phone-home, SSRF, XSS, XXE, robo de credenciales NTLM y exfiltración de datos en visores de PDF, convertidores y aplicaciones web. Se puede usar con Burp Collaborator o Interact.sh Se...
Moniker-Link-CVE-2024-21413-
Moniker-Link-CVE-2024-21413- El 13 de febrero de 2024, Microsoft anunció una vulnerabilidad de RCE y fuga de credenciales en Microsoft Outlook con el CVE asignado CVE-2024-21413 Moniker Link. Haifei Li de Check Point Research es acreditado por descubrir la vulnerabilidad. La vulnerabilidad elude...
thm-Moniker-Link-cve-2024-21413-writeup
TryHackMe: Moniker Link CVE-2024-21413 Path: Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 Difficulty: Premium room Focus: Outlook Protected View bypass, NTLM hash leaking, and credential capture with Responder CVE-2024-21413 is a critical Microsoft Outlook vulnerability...
CVE-2024-21413-Vulnerabilidad-Outlook-LAB
CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...
Estudo-de-Caso-CVE-2024-21413
CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + NTLM Credential Leak ⚠️ Legal Notice: This repository is exclusively for educational and security research purposes. All demonstrations were carried out in controlled and isolated environments. The use of these techniques against systems...
Moniker-Link-Lab-Setup
Configuración del Laboratorio Moniker Link - CVE-2024-21413 🎯 Resumen del Proyecto Laboratorio práctico de pruebas de penetración que demuestra la explotación del moniker link CVE-2024-21413 para el robo de credenciales NTLM. Este proyecto documenta toda la cadena de ataque, desde la configuració...
CVE-2025-50154
Kit de Endurecimiento y Caza de Amenazas NTLM/SMB Autor: w01f Versión: 1.0 Propósito: Auditar, endurecer y cazar usos inseguros de NTLM/SMB para mitigar riesgos como CVE-2025-50154. Resumen de CVE-2025-50154 Severidad: Alta Tipo: Fuga de credenciales NTLM + Bypass de parche Zero-Click Afecta:...
OESA-2026-3623 git security update
Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...
EUVD-2026-66765
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397 — Purple Team: Exploit + Detection Two halves...
CVE-2026-64632
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...
CVE-2026-62960
Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...
CVE-2026-54206: Improper Input Validation
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...
CVE-2026-8993 Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks
D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker infrastructure and to conduct SSRF Server Side...
CVE-2023-50916
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...
CVE-2022-42894
A vulnerability has been identified in syngo Dynamics All versions VA40G HF01. An unauthenticated Server-Side Request Forgery SSRF vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM credentials as well as loca...
EUVD-2018-13753
Malware in sbrugna...