All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence.
☆21Aug 6, 2022Updated 4 years ago
Alternatives and similar repositories for follina
Users that are interested in follina are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- ☆13Nov 6, 2023Updated 2 years ago
- Exploit Microsoft Zero-Day Vulnerability Follina (CVE-2022-30190)☆34Jun 16, 2022Updated 4 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 7 months ago
- Path traversal exploit for XWorm C2 servers (Up until v6.5). Arbitrary file write via unsanitized HWID in Recovery message handler.☆19Jan 22, 2026Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)☆143Sep 4, 2021Updated 5 years ago
- CVE☆30Oct 20, 2022Updated 4 years ago
- A havoc UI python module to help in reporting and vulnerabilities to exploit on an internal network.☆11Oct 31, 2023Updated 3 years ago
- POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox☆21Aug 9, 2022Updated 4 years ago
- Cobalt Strike profile generator using Jenkins to automate the heavy lifting☆38Feb 20, 2023Updated 3 years ago
- AuthStrike is an identity and authentication security testing tool for controlled simulations, security research, and education purpose o…☆20Sep 9, 2026Updated last month
- Follina MS-MSDT 0-day MS Office RCE (CVE-2022-30190) PoC in Go☆17Jun 1, 2022Updated 4 years ago
- Spring_CVE_2022_22947:Spring Cloud Gateway现高风险漏洞cve,poc漏洞利用,一键利用,开箱即用☆10Mar 4, 2022Updated 4 years ago
- Framework for ModBus TCP Industrial Protocol Exploitation.☆10Sep 30, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A python steganography module to store messages or files protected with AES-256 encryption inside an image.☆10Jan 18, 2022Updated 4 years ago
- Follina (CVE-2022-30190) is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerabili…☆12May 14, 2023Updated 3 years ago
- A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80☆21Apr 2, 2025Updated last year
- Linux and windows privilege escalation cheatsheet☆12May 18, 2023Updated 3 years ago
- This simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its p…☆59Sep 7, 2024Updated 2 years ago
- Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)☆25Aug 9, 2022Updated 4 years ago
- CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation☆23Feb 2, 2026Updated 9 months ago
- KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…☆14Jul 29, 2022Updated 4 years ago
- 禅道开源版16.5&16.5beta1，企业版6.5&6.5beta1，旗舰版3.0&3.0beta1的前台SQL注入☆13Jul 28, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …☆41May 14, 2022Updated 4 years ago
- RCE Exploit for Gitlab < 13.10.3☆61Jun 4, 2021Updated 5 years ago
- Proof of concept for Kerberos Armoring abuse.☆86Dec 12, 2025Updated 10 months ago
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago
- Experimental Reverse DNS Shell☆16Nov 26, 2025Updated 11 months ago
- Exploits for CVE-2023-27327 and CVE-2023-27328☆15May 9, 2023Updated 3 years ago
- Privilege escalation using the XAML diagnostics API (CVE-2023-36003)☆94Jan 11, 2024Updated 2 years ago
- ☆18Dec 12, 2020Updated 5 years ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆211Jun 10, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple DNS exfiltration script☆11Apr 17, 2023Updated 3 years ago
- A spin-off research project. Cobalt Strike x Notion collab 2022☆52Apr 8, 2022Updated 4 years ago
- CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve_2023_21554/☆60May 18, 2023Updated 3 years ago
- Reversing Citrix Gateway for XSS☆17Jul 3, 2023Updated 3 years ago
- A simple trap for web crawlers☆13Aug 2, 2023Updated 3 years ago
- POC for CLFS CVE-2022-24481☆14May 14, 2023Updated 3 years ago
- A repo containing some tooling build to assist with reverse engineering malware samples☆16Jul 22, 2023Updated 3 years ago