Lucene search
+L

3821 matches found

Kitploit
Kitploit
added 2026/09/13 12:17 p.m.6 views

HAFNIUM-Microsoft-Exchange-0day

Cool Resources CheckMyOWA What is it? We set up this site to aid victim notification based on lists of compromised Exchange servers with Outlook Web AccessOWA enabled, which were obtained from perpetrators of this mass breach event. This includes affected IPs/domains, as well as whether the actor...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:16 p.m.28 views

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:04 a.m.4 views

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: root@kitploit: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver =...

9.8CVSS8.1AI score0.9466EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/13 9:57 a.m.3 views

https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...

9.8CVSS8.1AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 9:30 a.m.7 views

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...

9.8CVSS8.1AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 8:16 a.m.4 views

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 7:49 a.m.6 views

CVE-2023-23397-POC

Two POCs I created for the CVE-2023-23397 NTLM vulnerability. Originally the pocs would send meeting requests with a reminder but I was able to send an email with a reminder that required no interaction from the user. The .ps1 file needs to be run from a compromised windows host with a compromise...

9.8CVSS8AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 6:57 a.m.7 views

CVE-2024-21413

CVE-2024-21413 Obtaining Login Credentials Using CVE-2024-21413 Vulnerability First of all, hello. Using a vulnerability in Microsoft Outlook, you can perform the following steps to obtain Windows user credentials. I use the class.phpmailer.php library via PHP to send the email. You need to open...

9.8CVSS8AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 6:21 a.m.5 views

CVE-2023-23397

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. Description Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. Indeed, an attacker is able to force a victi...

9.8CVSS8.1AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 5:14 a.m.4 views

CVE-2023-23397-PoC

CVE-2023-23397-PoC C send only version of CVE-2023-23397-POC-Powershell by Oddvar Moe @oddvarmoe Sends email from the address associated with Outlook account. root@kitploit: .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient email address -p, --path...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/13 5:01 a.m.198 views

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:51 a.m.9 views

CVE-2024-21413

Exploitation of CVE-2024-21413 Outlook Project status: On hold incomplete practice; failed to capture NTLM hashes Objectives Attempt to exploit vulnerability CVE-2024-21413, which allows leakage of NTLM hashes in Outlook when interacting with malicious links. The goal of the practice was not to...

9.8CVSS8AI score0.9466EPSS
SaveExploits24References5
Kitploit
Kitploit
added 2026/09/13 4:51 a.m.5 views

CVE-2020-16947

CVE-2020-16947 Outlook 2019 Remote Command Execution This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. When copying strings out of the ascii range among html contents, the corresponding string is replaced with...

9.3CVSS7AI score0.33788EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:35 a.m.5 views

CVE-2023-23397-POC-Using-Interop-Outlook

CVE-2023-23397-POC-Using-Interop-Outlook Easy implementation for CVE-2023-23397 exploit POC using Microsoft.Office.Interop.Outlook...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 4:28 a.m.4 views

EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:09 a.m.6 views

CVE-2023-23397-PoW

CVE-2023-23397-PoW Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application. For educational and research puproses only. CVE-2023-23397 preview This CVE aimed to retrieve NetNTLM hash logged in user from Microsoft Outlook client version 2016 except last patched version...

9.8CVSS8.1AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 4:00 a.m.6 views

CVE-2023-23397

CVE-2023-23397 - Microsoft Outlook Vulnerability For educational purposes only!...

9.8CVSS8.2AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 2:53 a.m.6 views

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit CVE-2024-21413 Microsoft Outlook RCE Exploit...

9.8CVSS8AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 2:06 a.m.7 views

css-the-bomb-inside-your-inbox

CSS: the bomb inside your inbox Welcome to the repo. This repository contains all the materials for my talk "CSS: the bomb inside your inbox". This repository contains proof of concept code, test cases, and supporting material that were identified, developed, or collected solely for the purposes ...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.4607 views

Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...

4.3CVSS6AI score0.48137EPSS
SaveExploits3References5
Rows per page
Query Builder