278 matches found
follina-spring
Follina MS-MSDT 익스플로잇 with Spring Boot 이 저장소는 Follina 페이로드 를 호스트/활성화 하는 서버이자, CVE-2022-30190을 악용하기 위한 공격 벡터로 사용될 악성 Word 문서 생성기 역할을 하는 간단한 Spring Boot 애플리케이션을 포함합니다. 이 취약점은 MSDT Microsoft Windows 지원 진단 도구를 통한 원격 코드 실행 으로 구성됩니다. 서버 측 페이로드 원하는 고유 페이로드를 제공하려면 다음을 수행해야 합니다: 페이로드 정의 예: root@kitploit:...
MSDT_CVE-2022-30190
MSDTCVE-2022-30190 이 저장소는 Follina MSDT를 Defender 관점에서 다루고 있습니다. 목차 개요 타임라인 익스플로잇 이해하기 IOC 목록 탐지 전략 테스트 및 연구 완화 계획 참고 자료 개요 이 버그는 crazymanShadow Chaser Group 소속이 보고한 Microsoft Windows 지원 진단 도구MSDT 원격 코드 실행 취약점입니다. Microsoft는 현재 이를 CVE-2022-30190로 추적하고 있습니다. 이 결함은 보안 업데이트를 계속 받는 모든 Windows 버전Window...
Ring0VBA
Ring0VBA CVE-2018-6606 с использованием VBA - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/...
FOLLINA-CVE-2022-30190
FOLLINA-CVE-2022-30190 FOLLINA-CVE-2022-30190 的实现 本仓库包含针对漏洞 FOLLINA-CVE-2022-30190 的利用工具 免责声明 本工具仅用于安全测试和研究目的。 克隆/复刻本工具即表示原始开发者不对行为人的行为承担任何责任。 先决条件 1. 从此处了解 CVE-2022-30190 2. 准备测试环境(建议使用 Virtual Box + Vagrant) 从此处下载 VirtualBox 从此处下载 Vagrant 从此处了解 Vagrant CLI 通过构造恶意的 Microsoft Word 文档来发起 "Follina"...
CVE-2022-30190
CVE-2022-30190 aka Follina 脆弱性の説明 Follinaは、Microsoft サポート診断ツール(Microsoft Support Diagnostic Tool、MSDT)に存在する脆弱性です。アプリケーションがURLプロトコルを介してMSDTを呼び出してサポートを実行すると、リモートコード実行の脆弱性が発生します。悪用に成功すると、攻撃者は実行中のアプリケーションの権限に基づいて任意のコードを実行できます。 脆弱性の再現環境 root@kitploit: Host OS: Ubuntu 22.04 LST Guest OS: Windows 10 Pro...
LittleCorporal
LittleCorporal LittleCorporal: Ein automatisierter Maldoc-Generator in C root@kitploit: C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ ...
CVE-2018-8174-msf
CVE-2018-8174-msf Dieses Metasploit-Modul erstellt ein bösartiges Word-Dokument, um die CVE-2018-8174 - VBScript-Speicherfehler-Schwachstelle auszunutzen. Dieses Modul ist ein sehr schneller Port und verwendet das Exploit-Beispiel, das in freier Wildbahn gefunden wurde. Der Exploit funktioniert n...
CVE-2017-11882
CVE-2017-11882 43b script originale da https://github.com/embedi/CVE-2017-11882 109b script originale da https://github.com/unamer/CVE-2017-11882/ un applauso, ora il codice di unamer può eseguire shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...
certbot
.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...
cve-2021-40444
cve-2021-40444 Reverse engineering dei file dannosi "A Letter Before Court 4.docx" che sfruttano cve-2021-40444 I file inclusi il documento Word dannoso e il file cab possono essere scaricati su any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Nota! Il nome di dominio nel...
ICT287_CVE-2022-30190_Exploit
ICT287CVE-2022-30190Exploit Progetto sullo sfruttamento e sulle strategie di mitigazione della vulnerabilità CVE-2022-30190 📌 Informazioni Questo repository contiene il mio progetto finale per ICT287, in cui esploro la vulnerabilità CVE-2022-30190 "Follina". Il progetto comprende: Analisi...
five-nights-at-follina-s
Cinque Notti da Follina Un progetto di cybersecurity della Fullstack Academy che esamina l'intero ciclo della vulnerabilità Follina CVE-2022-30190, dallo sfruttamento alla rilevazione e difesa. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu Questo set di strumenti presuppone che t...
CVE-2018-8174-msf
CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...
CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability
...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the document conversion process. An attacker can cause the server to make arbitrary outbound HTTPS requests or access local image files by uploading a specially crafted DOCX document that references...
CVE-2026-6047
LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...
EUVD-2026-36737
LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...
CVE-2026-6047
LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...
EUVD-2026-26117
OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit uploadfile and uploadimage endpoints to access files beyond the intended workspace-only filesystem policy...
PT-2026-35793
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8 Description A filesystem policy bypass exists in the processing of docx uploads, enabling local file reads outside of workspace boundaries. This allows attackers to access files beyond the intended...