CVE-2022-30190 (Follina) Proof of Concept

Overview

This project demonstrates a proof-of-concept exploit for CVE-2022-30190, also known as "Follina"—a critical remote code execution vulnerability affecting Microsoft Office via the MSDT protocol. The application generates malicious Office documents to illustrate the exploit workflow for educational and research purposes only.

⚠ Warning: This repository is for educational and authorized security research only. Do not use in production or against systems you do not own or have explicit permission to test.

Features

• 📝 Generates Office documents exploiting the Follina vulnerability
• 🌐 Simple web interface for payload creation
• 🐳 Dockerized for easy setup and isolation

Technologies

• Java 21 ☕
• Spring Boot 🚀
• Apache Commons 📦
• Docker 🐳
• JSP 🖥️

Prerequisites

• Docker 🐳
• Docker Compose 📦

Quick Start

1. Clone the repository:

   root@kitploit:~

   git clone https://github.com/yourusername/CVE-2022-30190.git
   cd CVE-2022-30190
   

2. Build and run with Docker Compose:

   root@kitploit:~

   docker compose up --build
   

3. Access the web interface:

   • Open http://localhost:8080 in your browser 🌐

Usage

• Enter your IP address and upload a shellcode file using the web form
• Click "Create Payload" to generate a malicious Office document
• Download the generated document and use it for testing in a controlled environment 🔒

Project Structure

src/main/java                 — Java source code (Spring Boot application)
src/main/webapp/WEB-INF/jsp   — JSP views for the web interface
Dockerfile                    — Container build instructions
docker-compose.yml            — Multi-container orchestration

References

• Microsoft Security Advisory
• Follina Analysis by SocPrime
• NIST CVE Details

License

This project is released under the MIT License.