This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.
☆98Nov 21, 2017Updated 8 years ago
Alternatives and similar repositories for CVE-2017-11882-metasploit
Users that are interested in CVE-2017-11882-metasploit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Exploit the vulnerability to execute the calculator☆67Jan 11, 2018Updated 8 years ago
- CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.☆330Dec 6, 2017Updated 8 years ago
- CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882☆535Nov 29, 2017Updated 8 years ago
- NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements☆94Sep 19, 2017Updated 9 years ago
- Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆312Sep 10, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Proof-of-Concept exploits for CVE-2017-11882☆495Nov 29, 2017Updated 8 years ago
- CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html☆17Feb 5, 2018Updated 8 years ago
- RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk: h…☆305Oct 18, 2017Updated 9 years ago
- PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)☆270Feb 28, 2018Updated 8 years ago
- Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective wa…☆726Nov 19, 2017Updated 8 years ago
- ☆11Aug 2, 2017Updated 9 years ago
- PoC ActiveX SVG Document Execution☆18Nov 8, 2018Updated 7 years ago
- This repo contains Axis web shells☆18Jun 15, 2019Updated 7 years ago
- CVE-2017-7269 to webshell or shellcode loader☆88May 16, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- DNS-Persist is a post-exploitation agent which uses DNS for command and control.☆207Nov 20, 2017Updated 8 years ago
- Microsoft Office / COM Object DLL Planting☆15May 14, 2016Updated 10 years ago
- Proof of Concept exploit for CVE-2017-8570☆183Jan 9, 2018Updated 8 years ago
- CVE-2018-8174 - VBScript memory corruption exploit.☆167May 23, 2018Updated 8 years ago
- Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software…☆198Nov 19, 2017Updated 8 years ago
- Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.☆634Jul 16, 2023Updated 3 years ago
- CVE-2018-2893☆13Oct 7, 2018Updated 8 years ago
- A cobaltstrike script that integrates DDEAuto Attacks☆63Oct 17, 2017Updated 9 years ago
- outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) a…☆126Sep 19, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Running CVE-2017-8759 exploit sample.☆256Jan 23, 2020Updated 6 years ago
- Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.☆119Nov 6, 2024Updated 2 years ago
- A set of compiled application restriction bypasses☆30Mar 15, 2017Updated 9 years ago
- DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.☆153Oct 20, 2018Updated 8 years ago
- Script used to generate and encode a PowerShell based Metasploit payloads.☆276Apr 20, 2022Updated 4 years ago
- ☆30Jul 17, 2018Updated 8 years ago
- Weblogic-CVE-2018-3191远程代码命令执行漏洞☆68Oct 24, 2018Updated 8 years ago
- Aggressor Script to launch IE driveby for CVE-2018-4878☆86Feb 10, 2018Updated 8 years ago
- CVE-2017-5689 Proof-of-Concept exploit☆55Jul 27, 2017Updated 9 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Cobalt Strike SCT payload obfuscator☆144Jul 7, 2017Updated 9 years ago
- This repo is all about myself coded exploit codes :)☆56Aug 27, 2019Updated 7 years ago
- POC of Mikrotik exploit from Vault 7 CIA Leaks☆15Dec 29, 2017Updated 8 years ago
- This script is used for extracting DDE in docx and xlsx☆12Dec 8, 2017Updated 8 years ago
- A collection of PowerShell Modules for BloodHound/Empire Orchestration☆109Sep 26, 2017Updated 9 years ago
- Burp plugin that clusters responses to show an overview of received responses☆14Jun 7, 2019Updated 7 years ago
- Proof-of-concept two-stage dropper generator that uses bits from external sources☆100Nov 29, 2017Updated 8 years ago