CVE-2024-21413

Obtaining Login Credentials Using CVE-2024-21413 Vulnerability

First of all, hello. Using a vulnerability in Microsoft Outlook, you can perform the following steps to obtain Windows user credentials.

I use the class.phpmailer.php library via PHP to send the email.

You need to open the PHP file and configure the mail server settings.

Then, we will enter our Linux device's IP address into the IP address found in the code.

To listen for incoming requests on our Linux device, we will run:

impacket-smbserver -smb2support -ip 0.0.0.0 test /tmp

we will run this command.

When the recipient clicks on the link in the email, we will capture the credentials.

This has been written and made public for testing and precautionary purposes. Do not use for malicious or illegal purposes. I do not accept responsibility for any illegal use. Thank you for your attention and interest. MSeymenD