CVE-2017-8759

CVE-2017-8759 Weaponisation PoC This repository contains data that can be used to weaponise the CVE-2017-8759 vulnerability. For full information visit https://www.mdsec.co.uk/blog/ to find the post related to this vulnerability. As always, my research is aimed to help the community become more...

2017-11882_Generator

CVE-2017-11882 A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. 2017-11882Generator This is ...

htattack

htattack.py An exploit implementation for RCE in RTF docs CVE-2017-0199. Video in Spanish: https://www.youtube.com/watch?v=0lDvclMrymM Usage: python htattack.py -u...

CVE-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

RTF-Cleaner

RTF-Cleaner RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

detect_CVE-2026-21509

Detections for the CVE-2026-21509 vulnerability in MS Office This repository contains a YARA rule to detect RTF documents with a potential exploit for CVE-2026-21509, and a Python script to check if MS Office files contain Shell.Explorer.1 OLE objects, which is related to that vulnerability. See...

CVE-2023-21716-POC

History In February 2023, Microsoft patched a critical vulnerability in Microsoft Word, identified as CVE-2023-21716 with a CVSS score of 9.8, which could allow attackers to execute remote code without authentication. This vulnerability also affected the Outlook Preview Pane, meaning it can be...

CVE-2017-8570

What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file into the %TEMP% directory, and then execute it using the primitive that the vulnerability provides. Why? A few...

CVE-2023-21716

CVE-2023-21716 RTF Crash POC Python 3.11 Windows 10...

full-poc-CVE-2025_21298

Review of the CVE-2025-21298 vulnerability CVE-2025-21298 is a critical vulnerability in the OLE Object Linking and Embedding technology used in Microsoft Windows. It specifically affects the UtOlePresStmToContentsStm function in the ole32.dll library. This function is responsible for converting ...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

CVE-2018-0802_POC

CVE-2018-0802POC usage: cve-2018-0802poc.py -h -e EXECUTABLE -o OUTPUT The .rtf sample exploit the vulnerability to execute the calculator...

CVE-2023-21716

CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment or othe...

CVE-2017-8570

来源：https://www.exploit-db.com/exploits/44263/ 使用方法：python packagercompositemoniker.py -s calc.sct -o example.rtf What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file...

CVE-2017-8570

CVE-2017-8570Exp.py Reference:https://github.com/rxwx/CVE-2017-8570 Changes: Usage: python2 CVE-2017-8570Exp.py -s write.sct -e write.exe -o write.rtf + RTF file written to: write.rtf...

SignHere

SignHere Introduction CVE-2017-11882 - The unique vulnerability identifier of Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allows an attacker to run code in the context of the current user without...

CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

CVE-2017-11882

CVE-2017-11882 Exploit CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum. For remote command execution,this exploit will call WinExec with SWHIDE and call ExitProcess after WinExec returns. For remote code execution,this exploit just jmp to code. I cannot find a reference...