CVE-2018-10583

This script creates a malicious ODF file that exploits CVE-2018-10583 to leak NetNTLM credentials by embedding a remote object reference in the document. It automates the creation of a crafted ODT file that, when opened, triggers an SMB connection to an attacker-controlled server.

This PoC creates a malicious ODF file that exploits CVE-2018-10583 to leak NetNTLM credentials by embedding an SMB connection in the document. It uses the ezodf library to generate the file and requires a listener (e.g., Responder) to capture the credentials.

This PoC generates a malicious ODF file that exploits CVE-2018-10583 to leak NetNTLM credentials when opened in vulnerable versions of LibreOffice or OpenOffice. It creates an ODT file with a crafted content.xml that triggers an external resource request to an attacker-controlled server.

This PoC creates a malicious ODF file that exploits CVE-2018-10583 to leak NetNTLM credentials by embedding an SMB connection in the document. It uses the ezodf library to generate the file and requires a listener (e.g., Responder) to capture the credentials.

This Metasploit module generates a malicious ODT file that exploits CVE-2018-10583 in LibreOffice 6.03 and Apache OpenOffice 4.1.5. The ODT file contains a crafted content.xml that points to an SMB listener for hash capture.