shaheeryasirofficial/smugglemypayloadGenerates HTML smuggling pages that embed and reconstruct files client-side via JavaScript, with payload encoding, chunking, obfuscation, and…
ahmed-tarek22752/rce-cve-2017-0199-detection-analysisThis repository contains a full blue-team malware analysis of a real malicious DOCX exploiting CVE-2017-0199. The lab includes sandbox execution,…
kaleth4/cve-2022-30190Automated PoC exploit for CVE-2022-30190 (Follina) that generates malicious RTF/DOCX files abusing MSDT protocol to execute arbitrary commands and…
nickvourd/rti-toolkitPowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…
alteredsecurity/365-stealerAutomates Illicit Consent Grant attacks against Azure/O365 tenants to steal refresh tokens, exfiltrate emails/OneDrive data, and create malicious…
sublime-security/ics-phishing-toolkitOpen source tooling to stop ICS phishing (malicious calendar invites)
tangent65536/cve-2026-20841PoC for the "Windows Notepad RCE"
kimstars/ashwesker-cve-2026-21509Proof-of-concept exploit for Microsoft Office security feature bypass (CVE-2026-21509). Generates malicious DOCX files with embedded OLE objects to…
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
spyboy-productions/facad1ngOpen-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to…
arkha-corvus/letsdefend-soc173-follina-0-day-detectedWe are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered…
saykino/cve-2025-56218Advisory detailing CVE-2025-56218, an unrestricted file upload vulnerability in Ascertia SigningHub allowing malicious Excel files with phishing…
ajansha/cve-2025-55903Proof of concept for CVE-2025-55903, a stored HTML injection in PerfexCRM allowing authenticated users to inject malicious HTML into invoices and…
ajansha/cve-2025-60378Proof of concept for stored HTML injection in RISE CRM, demonstrating how authenticated users can inject malicious HTML into invoices and messages,…
cldrn/macphishGenerates malicious Office for Mac macros with beacon, credential harvesting, and meterpreter payloads for phishing and exploitation testing on macOS.
delivr-to/detectionsA home for detection content developed by the delivr.to team
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
devbuihieu/cve-2025-33053-proof-of-conceptCVE-2025-33053 Proof Of Concept (PoC)
