CVE-2024-21413
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
email-securityexploitationpassword-cracking+3
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
ronf98/cve-2024-43451-pocCVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious shortcuts.
nickvourd/rti-toolkitPowerShell toolkit for remote template injection attacks and defense. Injects malicious links into Office Word documents for phishing, with…
johnhammond/msdt-follinaGenerates a malicious Microsoft Word document exploiting the MS-MSDT 'Follina' vulnerability to execute arbitrary commands or stage payloads via an…
octoberfest7/teamsphisherSend phishing messages and attachments to Microsoft Teams users
secureworks/squarephishAdvanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…
waelmas/frameless-bitbA new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login…
optiv/microsoft365_devicephishA proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
mrd0x/webview2-cookie-stealerInjects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
kimstars/ashwesker-cve-2026-21509Proof-of-concept exploit for Microsoft Office security feature bypass (CVE-2026-21509). Generates malicious DOCX files with embedded OLE objects to…
d0rb/cve-2024-21378This repository contains an exploit for targeting Microsoft Outlook through Exchange Online, leveraging a vulnerability to execute arbitrary code via…
dshabani96/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP email delivery, malicious RTF attachment generation, and optional…
yoguicr/cve-2024-21413-outlook-assessmentDetailed vulnerability assessment and exploitation report for CVE-2024-21413 (Moniker Link) in Microsoft Outlook, including attack path, NetNTLMv2…
mqkgithub/moniker-link-cve-2024-21413Step-by-step walkthrough of exploiting CVE-2024-21413 in Microsoft Outlook to bypass Protected View and leak NTLM credentials via Moniker Links,…
spiderlabs/fireworkFirework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
rubenformation/ms-photos_ntlm_leakNew 0 day vulnerability allowing to leak NTLM hashes from browsers with one click
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API