Tangled

Tangled Tangled is a phishing platform designed from an offensive security perspective. It automates many of the aspects of social engineering campaigns delivery and weaponizes iCalendar rendering features in Microsoft Outlook & Gmail Google Workspace to deliver spoofed meeting invites that are...

CVE-2023-35636

CVE-2023-35636 Microsoft Outlook Information Disclosure Vulnerability leak password hash - Expect Script POC CVE-2023-35636 an exploit of the calendar sharing function in Microsoft Outlook, whereby adding two headers to an email directs Outlook to share content and contact a designated machine...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Script functions to either send or save calendar NTLM leakage using the ReminderSoundFile option. Run script to load the functions in Powershell, then you can use the examples below as a starting point for using the functions. Requires to be run on a Windows machine...

CVE-2023-23397-PoC

CVE-2023-23397-PoC C send only version of CVE-2023-23397-POC-Powershell by Oddvar Moe @oddvarmoe Sends email from the address associated with Outlook account. .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path Required. UNC Path -...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

CVE-2023-23397

CVE-2023-23397 - Microsoft Outlook Vulnerability For educational purposes only!...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

CVE-2023-23397-POC-Using-Interop-Outlook

CVE-2023-23397-POC-Using-Interop-Outlook Easy implementation for CVE-2023-23397 exploit POC using Microsoft.Office.Interop.Outlook...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

KnockOutlook

KnockOutlook "The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usage / /// / // \ / // / / / / , / / / / /// / / / / / / /...

css-the-bomb-inside-your-inbox

CSS: 당신의 받은 편지함 속 폭탄 리포지토리에 오신 것을 환영합니다. 이 리포지토리는 제 발표 "CSS: 당신의 받은 편지함 속 폭탄"의 모든 자료를 포함하고 있습니다. 이 리포지토리는 합법적인 보안 연구, 분석 및 방어적 테스트 목적으로만 식별, 개발 또는 수집된 개념 증명PoC 코드, 테스트 케이스 및 보조 자료를 포함합니다. 이 연구에 대한 자세한 내용은 다음 링크에서 확인할 수 있습니다: 연구 논문 목차 PoC CSS 핫와이어링 붙여넣기를 통한 토큰 유출 CSP가 외부 리소스를 차단하는 경우 텍스트 노드 유출 HTM...

HAFNIUM-Microsoft-Exchange-0day

Cool Resources CheckMyOWA What is it? We set up this site to aid victim notification based on lists of compromised Exchange servers with Outlook Web AccessOWA enabled, which were obtained from perpetrators of this mass breach event. This includes affected IPs/domains, as well as whether the actor...

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook LAB 취약점 취약점 설명 CVE-2024-21413는 Microsoft Outlook에서 발견된 중요한 취약점으로, 정교하게 조작된 이메일을 통해 원격 공격자가 악성 링크를 실행할 수 있게 합니다. 이 익스플로잇은 file:// 프로토콜을 사용하여 피해자를 공격자가 제어하는 SMB 공유로 리디렉션하여 NTLM 자격 증명이 노출되거나 로컬 파일에 대한 무단 액세스가 발생할 수 있습니다. Windows 10 서비스 시작 스크립트 + 자격 증명 Windows 10 실습 환경에서 사용자...

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using System.Text;...

CVE-2023-23397-PoW

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application. For educational and research puproses only. CVE-2023-23397 preview This CVE aimed to retrieve NetNTLM hash logged in user from Microsoft Outlook client version 2016 except last patched version...

CVE-2021-26855-Scanner

CVE-2021-26855-스캐너 CVE-2021-26855를 위한 스캐너 및 PoC PoC는 GreyOrder에게 감사드립니다. 편의를 위해 재업로드하며, Microsoft가 적어도 한 번 삭제했기 때문입니다 : 대량 스캔 사용 예시: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d exchange.json.gz shodan parse exchange.json --fields=ipstr,port ips.txt python3...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange 서버 Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...