CVE-2023-35636

This PoC exploits CVE-2023-35636, an information disclosure vulnerability in Microsoft Outlook, by sending a crafted email with specific headers to trigger an NTLM v2 hash leak when the recipient interacts with a calendar icon. The script uses Expect to automate the SMTP interaction and requires a responder with SMB server to capture the leaked hash.