GITHUB-passtheticket/CVE-2024-38200
GITHUB html WORKING POC
Exploit for CVE-2024-43609
- Microsoft 365 Apps - Information Disclosure
AI Analysis
The repository contains a functional exploit for CVE-2024-43609, which leverages Office URI schemes to capture NTLMv2 hashes over HTTP via a 302 redirect to a UNC path. The `uncredirect.py` script facilitates this attack by redirecting HTTP requests to a Responder-controlled UNC path, enabling NTLM relay attacks.
Attack Type
info_leak
Complexity
moderate
Reliability
reliable
Click anywhere or press Esc to close