THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- On February 13, 2024, Microsoft published a critical security vulnerability in Microsoft Outlook, identified as CVE-2024-21413, known as the Moniker Link Vulnerability. The vulnerability allows an attacker to bypass Outlook's Protected View...

CVE-2024-21413-Outlook-Assessment

title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 is a critical remote code execution vulnerability in Microsoft Outlook versions including Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 before February 2024 patch. It allows an unauthenticated attacker to bypass Outlook’s Protected View by sending a specially crafted emai...

thm-Moniker-Link-cve-2024-21413-writeup

TryHackMe: Moniker Link CVE-2024-21413 Path: Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 Difficulty: Premium room Focus: Outlook Protected View bypass, NTLM hash leaking, and credential capture with Responder CVE-2024-21413 is a critical Microsoft Outlook vulnerability...

Blind-Trust-CVE-2024-21413-Research

BLIND TRUST - Moniker链接钓鱼活动框架 一个用于利用CVE-2024-21413 Moniker链接漏洞模拟定向钓鱼活动的安全研究工具。专为授权的红队行动、渗透测试和安全意识培训设计。 概览 BLIND TRUST 是一个钓鱼活动框架，帮助安全团队了解和测试其对复杂电子邮件攻击的防御能力。它利用Moniker链接技术绕过Outlook的受保护视图，提供逼真的攻击模拟，组织可借此加强安全态势。 该工具自动完成端到端的活动工作流——从配置到电子邮件投递——同时通过可定制的UNC路径和灵活的话术选项维持操作安全性。 目的 组织需要了解真实的攻击技术才能有效防御。TRUST...

https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook 远程代码执行漏洞 PoC 📜 描述 该脚本提供了 CVE-2024-21413 的概念验证（PoC），这是 Microsoft Outlook 中发现的一个严重安全漏洞，CVSS 评分为 9.8。该漏洞被称为 MonikerLink 漏洞，影响深远，包括潜在的本地 NTLM 信息泄露和远程代码执行的可能性。此外，它突显了一种可能绕过 Office 受保护视图的攻击向量，从而将威胁扩展到其他 Office 应用程序。 🚀 用法 请负责任地使用此工具，并确保您已获得目标系统所有者的授权。该脚本需要 SMTP...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

PoC de Vulnerabilidad de Ejecución Remota de Código en Microsoft Outlook Este script presenta una prueba de concepto PoC para CVE-2024-21413, una falla de seguridad crítica identificada en Microsoft Outlook con una puntuación CVSS de 9.8. Denominado exploit MonikerLink, esta vulnerabilidad conlle...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office Security Feature Bypass CVE-2026-21509 is a Microsoft Office security feature bypass vulnerability CVSS 7.8 , actively exploited by APT28 Russian hackers against Ukraine Reliance on untrusted inputs in security decisions CWE-807 — "breaking the kill bit" Allows...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link CVE-2024-21413 — TryHackMe Status: ✅ Completed Date: 30 May 2025 🎯 Objective Understand and exploit CVE-2024-21413, a vulnerability in Microsoft Outlook that bypasses Protected View using Moniker Links to leak NTLM credentials. Learn how to perform...

CVE-2024-21413-Moniker-Link-Writeup

CVE-2024-21413 – Moniker Link Vulnerability Write-up This repository contains a technical write-up of CVE-2024-21413 , a vulnerability related to the handling of Moniker Links in Microsoft Outlook that allows attackers to bypass Protected View and leak NTLMv2 credentials through user interaction...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

CVE-2026-21514_CVE-2026-21510

CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX bypass or Protected View Bypass Rebuild document package with obfuscated path to WindowsUpdateDiagnostic.xml inside word/rels/webSettings.xml.rels Pending Check other xml configs in path C:\Windows\diagnostics\index if they support th...

Moniker-Link--CVE-2024-21413-

🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Microsoft Outlook Moniker Link Vulnerability Overview This repository documents my hands-on analysis of CVE-2024-21413 Moniker Link , a critical Microsoft Outlook vulnerability that bypasses Protected View to leak Windows NetNTLMv2 credentials via SMB authentication. Severity:...

cve-2024-21413-outlook-monikerlink-lab

CVE-2024-21413 — Outlook Moniker Link Lab / PoC Educational lab notes and a small Proof of Concept PoC demonstrating the CVE-2024-21413 attack flow in a controlled environment TryHackMe-style lab. ⚠️ For educational purposes only. Do not use against systems you don’t own or have explicit permissio...

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulne...

Exploit for Improper Input Validation in Microsoft

🛡️ Moniker Link CVE-2024-21413 Room: Moniker Link C...

Microsoft Outlook Improper Input Validation Vulnerability

Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode...

PT-2024-9041 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Word, which can be exploited by a remote attacker to bypass security features, potentially allowing them to disable...