NOMISEC-melting0256/Enterprise-Cybersecurity

NOMISEC WORKING POC
Exploit for CVE-2022-30190 - Microsoft Office Word MSDTJS
AI Analysis

This PoC exploits CVE-2022-30190 (Follina) by generating a malicious Word document that leverages the MS-MSDT URL protocol to execute arbitrary commands via a crafted HTML payload. It includes options for direct command execution or a reverse shell using netcat.

Attack Type
RCE
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
T1204.002 - Malicious File T1190 - Exploit Public-Facing Application T1059.001 - PowerShell
Loading exploit code...
Download ZIP Password: eip
Source
Platform Nomisec
Type client-side
Files 1
Stars 1
Forks 0
Last Push Dec 29, 2022
Authors
melting0256
Vulnerability
CVE-2022-30190
Microsoft Office Word MSDTJS
HIGH KEV
CVSS 7.8