by vicarius
log in join community
by @cr33nsh4w
01 Aug 2023
#existing_exploit_analysis

Analyze a CVE exploitation

publish

CVE-2023-23397-POC-Powershell

by @cr33nsh4w
by @cr33nsh4w
01 Aug 2023
#existing_exploit_analysis

Analyze a CVE exploitation

publish

CVE-2023-23397-POC-Powershell

CVEs

CVE-2023-23397
9.8 Critical Severity

Apps

Office
OfficeMicrosoft
16.0.19929.20000.*
16.0.19926.20000.*
16.0.19925.20000.*
16.0.19924.20000.*
16.0.19923.20000.*
16.0.19922.20000.*
16.0.19822.20114.*
16.0.19921.20000.*
16.0.19919.20000.*
16.0.19822.20104.*
365 Apps
365 AppsMicrosoft
16.0.19127.20314.*
2401.17231.20236.*
116.0.17231.20194.*
16.0.17425.20070.*
16.0.17328.20184.*
16.0.17328.20162.*
16.0.17328.20068.*
16.0.17231.20236.*
16.0.17231.20194.*
16.0.17126.20132.*
Outlook
OutlookMicrosoft
16.0.19929.20000.*
16.107.3.*
16.0.19926.20000.*
16.0.19925.20000.*
16.0.19924.20000.*
16.0.19923.20000.*
26072.603.4515.6584.*
16.0.19922.20000.*
16.0.19822.20114.*
1.2026.317.100.*

Screenshots from the blog posts

images/clkrckl2c0wfk1jomd4v58b4u.pngimages/clkrckl2c0wfk1jomd4v58b4u.png

Summary

Script functions to either send or save calendar NTLM leakage using the ReminderSoundFile option

Script link

CVE-2023-23397-POC-Powershell/CVE-2023-23397.ps1 at main · api0cradle/CVE-2023-23397-POC-Powershell

Contribute to api0cradle/CVE-2023-23397-POC-Powershell development by creating an account on GitHub.

image

Description

Tags

#CVE-2023-23397
users/photos/cl7hp8feg1w5h0lnw4t0vbzvk.jpg

@cr33nsh4w

54 posts

Total vcoins

0

Badges

badges/images/cl1xi65zx02el0jms239bekpv.png

Malware Researcher

badges/images/cl1xi6pcn02et0jms48zfg0ns.png

Early-bird

badges/images/clemwgql90gww0jnxh6rbcqsr.png

Memelord

badges/images/clktw0fnh0pci1inadxpbcwpn.png

Shawarma King

badges/images/clktw3w8b0psc1inaam75d4oc.png

Vulnerability Researcher

badges/images/clktw13gd0pfn1ina06jadtzu.png

1337

Social media links

Comments (0)