CVE-2024-38200

This exploit leverages Microsoft Office URI handlers to force NTLMv2 authentication over HTTP, allowing an attacker to capture and relay the hash to escalate privileges. It requires DNS manipulation and a malicious HTML page to trigger the vulnerability.

The repository contains a functional exploit for CVE-2024-38200, demonstrating how to capture NTLMv2 hashes over HTTP via Office URI schemes and relay them for privilege escalation. The `uncredirect.py` script handles HTTP redirection to UNC paths, bypassing security restrictions.