follina-spring

Follina MS-MSDT 익스플로잇 with Spring Boot 이 저장소는 Follina 페이로드 를 호스트/활성화 하는 서버이자, CVE-2022-30190을 악용하기 위한 공격 벡터로 사용될 악성 Word 문서 생성기 역할을 하는 간단한 Spring Boot 애플리케이션을 포함합니다. 이 취약점은 MSDT Microsoft Windows 지원 진단 도구를 통한 원격 코드 실행 으로 구성됩니다. 서버 측 페이로드 원하는 고유 페이로드를 제공하려면 다음을 수행해야 합니다: 페이로드 정의 예: root@kitploit:...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 이 저장소는 Follina MSDT를 Defender 관점에서 다루고 있습니다. 목차 개요 타임라인 익스플로잇 이해하기 IOC 목록 탐지 전략 테스트 및 연구 완화 계획 참고 자료 개요 이 버그는 crazymanShadow Chaser Group 소속이 보고한 Microsoft Windows 지원 진단 도구MSDT 원격 코드 실행 취약점입니다. Microsoft는 현재 이를 CVE-2022-30190로 추적하고 있습니다. 이 결함은 보안 업데이트를 계속 받는 모든 Windows 버전Window...

Ring0VBA

Ring0VBA CVE-2018-6606 с использованием VBA - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 FOLLINA-CVE-2022-30190 的实现 本仓库包含针对漏洞 FOLLINA-CVE-2022-30190 的利用工具 免责声明 本工具仅用于安全测试和研究目的。 克隆/复刻本工具即表示原始开发者不对行为人的行为承担任何责任。 先决条件 1. 从此处了解 CVE-2022-30190 2. 准备测试环境（建议使用 Virtual Box + Vagrant） 从此处下载 VirtualBox 从此处下载 Vagrant 从此处了解 Vagrant CLI 通过构造恶意的 Microsoft Word 文档来发起 "Follina"...

CVE-2022-30190

CVE-2022-30190 aka Follina 脆弱性の説明 Follinaは、Microsoft サポート診断ツール（Microsoft Support Diagnostic Tool、MSDT）に存在する脆弱性です。アプリケーションがURLプロトコルを介してMSDTを呼び出してサポートを実行すると、リモートコード実行の脆弱性が発生します。悪用に成功すると、攻撃者は実行中のアプリケーションの権限に基づいて任意のコードを実行できます。 脆弱性の再現環境 root@kitploit: Host OS: Ubuntu 22.04 LST Guest OS: Windows 10 Pro...

LittleCorporal

LittleCorporal LittleCorporal: Ein automatisierter Maldoc-Generator in C root@kitploit: C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ ...

CVE-2018-8174-msf

CVE-2018-8174-msf Dieses Metasploit-Modul erstellt ein bösartiges Word-Dokument, um die CVE-2018-8174 - VBScript-Speicherfehler-Schwachstelle auszunutzen. Dieses Modul ist ein sehr schneller Port und verwendet das Exploit-Beispiel, das in freier Wildbahn gefunden wurde. Der Exploit funktioniert n...

CVE-2017-11882

CVE-2017-11882 43b script originale da https://github.com/embedi/CVE-2017-11882 109b script originale da https://github.com/unamer/CVE-2017-11882/ un applauso, ora il codice di unamer può eseguire shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

cve-2021-40444

cve-2021-40444 Reverse engineering dei file dannosi "A Letter Before Court 4.docx" che sfruttano cve-2021-40444 I file inclusi il documento Word dannoso e il file cab possono essere scaricati su any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Nota! Il nome di dominio nel...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Progetto sullo sfruttamento e sulle strategie di mitigazione della vulnerabilità CVE-2022-30190 📌 Informazioni Questo repository contiene il mio progetto finale per ICT287, in cui esploro la vulnerabilità CVE-2022-30190 "Follina". Il progetto comprende: Analisi...

five-nights-at-follina-s

Cinque Notti da Follina Un progetto di cybersecurity della Fullstack Academy che esamina l'intero ciclo della vulnerabilità Follina CVE-2022-30190, dallo sfruttamento alla rilevazione e difesa. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu Questo set di strumenti presuppone che t...

CVE-2018-8174-msf

CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...

CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability

...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the document conversion process. An attacker can cause the server to make arbitrary outbound HTTPS requests or access local image files by uploading a specially crafted DOCX document that references...

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

EUVD-2026-36737

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

EUVD-2026-26117

OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit uploadfile and uploadimage endpoints to access files beyond the intended workspace-only filesystem policy...

PT-2026-35793

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8 Description A filesystem policy bypass exists in the processing of docx uploads, enabling local file reads outside of workspace boundaries. This allows attackers to access files beyond the intended...