d0rb / CVE-2024-21378

This repository contains an exploit for targeting Microsoft Outlook through Exchange Online, leveraging a vulnerability to execute arbitrary code via COM DLLs. The exploit utilizes a modified version of Ruler to send a malicious form as an email, triggering the execution upon user interaction within the Outlook thick client.

☆7

Related projects: ⓘ

BambiZombie / ThreadlessSpawn
A Simple PoC
☆18Updated 3 months ago
Meowmycks / etwunhook
Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
☆41Updated 6 months ago
kyxiaxiang / AV_EDR_EPP_Notes
☆41Updated 5 months ago
parzel / GoSleepyCrypt
In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
☆39Updated 8 months ago
EspressoCake / Defender-Exclusions-Creator-BOF
☆73Updated 10 months ago
MrAle98 / BOF-RunPE
☆50Updated last year
ScriptIdiot / sw2-secinject
Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
☆41Updated 2 years ago
dreamkinn / go-ThreadlessInject
Golang implementation of @CCob's C# ThreadlessInject
☆30Updated 4 months ago
enkomio / s4killer
☆67Updated this week
alfarom256 / StinkyLoader
It stinks
☆99Updated 2 years ago
NioZow / bof-collection
☆18Updated last month
WKL-Sec / StackMask
A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
☆55Updated last year
qwqdanchun / ScreenShot-BOF
☆39Updated last year
ScriptIdiot / sleepmask_ekko_cfg
Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
☆40Updated last year
amjcyber / EDRNoiseMaker
Detect WFP filters blocking EDR communications
☆49Updated 8 months ago
Mav3rick33 / ZenLdr
Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
☆93Updated last year
evilashz / PigSyscall
An implementation of an indirect system call
☆99Updated last year
Hagrid29 / BYOVDKit
bring your own vulnerable driver
☆66Updated last year
deh00ni / NtDumpBOF
☆79Updated 2 weeks ago
maxDcb / C2TeamServer
TeamServer and Client of Exploration Command and Control Framework
☆31Updated this week
oldboy21 / SyscallMeMaybe
Implementation of Indirect Syscall technique to pop a calc.exe
☆82Updated 7 months ago
lap1nou / CLR_Heap_encryption
☆94Updated 11 months ago
MaorSabag / fileSearcher
A simple BOF (Beacon Object File) to search files in the system
☆11Updated 9 months ago
fern89 / C2
A basic C2 framework written in C
☆53Updated 2 months ago
susMdT / AceLdr
Cobalt Strike UDRL for memory scanner evasion.
☆34Updated 9 months ago
ShadowMccc / MemoryEvasion
A Cobalt Strike memory evasion loader for redteamers
☆94Updated last year
Uri3n / lurch
Command and Control
☆23Updated last month
ScriptIdiot / sleepmask_PatchlessHook
Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
☆76Updated last year
tykawaii98 / CVE-2024-21338_PoC
☆38Updated 2 months ago
Cobalt-Strike / sleepmask-vs
A simple Sleepmask BOF example
☆39Updated 2 weeks ago