
Microsoft365_devicePhish
A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
authenticationemail-securitypenetration-testing+4
107

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

Proof-of-concept exploit for CVE-2024-21413, a critical Outlook RCE vulnerability that leaks NetNTLMv2 hashes via crafted file:// links, enabling…