msdt-follina
johnhammond/msdt-follinaGenerates a malicious Microsoft Word document exploiting the MS-MSDT 'Follina' vulnerability to execute arbitrary commands or stage payloads via an…
command-and-controlexploitationpayload-development+2
1.6k
johnhammond/msdt-follinaGenerates a malicious Microsoft Word document exploiting the MS-MSDT 'Follina' vulnerability to execute arbitrary commands or stage payloads via an…
praneethnaidu1910-cmd/cve-2023-23397-purple-teamPurple team project exploiting CVE-2023-23397 Outlook NTLM leak with phishing delivery, plus Sigma/Wazuh detections mapped to MITRE ATT&CK for the…
romain-deperne/cve-2026-33715Unauthenticated SSRF and open email relay in Chamilo LMS — CVE-2026-33715 / CVSS 7.2
jiep/offensive-ai-compilationA curated list of useful resources that cover Offensive AI.
rspamd/rspamdSpam filtering and email processing framework with regex rules, statistical analysis, custom Lua plugins, and external blocklists for MTA integration.
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
sublime-security/sublime-rulesSublime rules for email attack detection, prevention, and threat hunting.
strangerealintel/cyberthreatintelAnalysis of malware and Cyber Threat Intel of APT and cybercriminals groups
soufianetahiri/teamsntlmleakLeak NTLM via Website tab in teams via MS Office
husam212/mitmerAutomated man-in-the-middle attack tool.
mcorybillington/suitecrm-rceWriteup on CVE-2020-28328: SuiteCRM Log File Remote Code Execution plus some bonus Cross-Site Scripting
mbadanoiu/cve-2021-46366CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS
sudosammy/cve-2017-15394Demonstrates an IDN homograph attack in Chromium extensions to spoof URLs, aiding in deception attacks by coercing victims into granting permissions…
fdzdev/cve-2024-50964Documentation of CVE-2024-50964: critical DMARC policy bypass in DonWeb MX server allowing email spoofing, with low attack complexity and no required…
viniciusfariasdev/cve-2024-21413-outlook-monikerlink-labEducational lab and PoC demonstrating CVE-2024-21413 Outlook Moniker Link attack to leak netNTLMv2 hashes via crafted HTML email.
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
yoguicr/cve-2024-21413-outlook-assessmentDetailed vulnerability assessment and exploitation report for CVE-2024-21413 (Moniker Link) in Microsoft Outlook, including attack path, NetNTLMv2…