by vicarius
log in join community
by @cr33nsh4w
01 Aug 2023
#existing_exploit_analysis

Analyze a CVE exploitation

publish

CVE-2023-23397-POC-Powershell

by @cr33nsh4w
by @cr33nsh4w
01 Aug 2023
#existing_exploit_analysis

Analyze a CVE exploitation

publish

CVE-2023-23397-POC-Powershell

CVEs

CVE-2023-23397
9.8 Critical Severity

Apps

Office
OfficeMicrosoft
16.0.19530.20038.*
16.0.19611.20002.*
16.0.19609.20004.*
16.0.19608.20000.*
16.0.19231.20274.*
16.0.17932.20620.*
16.0.19607.20002.*
16.0.14334.20440.*
16.0.10417.20080.*
16.0.18526.20672.*
365 Apps
365 AppsMicrosoft
16.0.19127.20314.*
2401.17231.20236.*
116.0.17231.20194.*
16.0.17425.20070.*
16.0.17328.20184.*
16.0.17328.20162.*
16.0.17328.20068.*
16.0.17231.20236.*
16.0.17231.20194.*
16.0.17126.20132.*
Outlook
OutlookMicrosoft
16.0.19530.20038.*
1.2025.1209.500.*
16.0.19611.20002.*
16.0.19609.20004.*
16.0.19608.20000.*
16.0.19231.20274.*
16.0.17932.20620.*
16031.19127.20402.0.*
16.0.19607.20002.*
1.2025.1208.200.*

Screenshots from the blog posts

images/clkrckl2c0wfk1jomd4v58b4u.pngimages/clkrckl2c0wfk1jomd4v58b4u.png

Summary

Script functions to either send or save calendar NTLM leakage using the ReminderSoundFile option

Script link

CVE-2023-23397-POC-Powershell/CVE-2023-23397.ps1 at main · api0cradle/CVE-2023-23397-POC-Powershell

Contribute to api0cradle/CVE-2023-23397-POC-Powershell development by creating an account on GitHub.

image

Description

Tags

#CVE-2023-23397
users/photos/cl7hp8feg1w5h0lnw4t0vbzvk.jpg

@cr33nsh4w

54 posts

Total vcoins

0

Badges

badges/images/cl1xi65zx02el0jms239bekpv.png

Malware Researcher

badges/images/cl1xi6pcn02et0jms48zfg0ns.png

Early-bird

badges/images/clemwgql90gww0jnxh6rbcqsr.png

Memelord

badges/images/clktw0fnh0pci1inadxpbcwpn.png

Shawarma King

badges/images/clktw3w8b0psc1inaam75d4oc.png

Vulnerability Researcher

badges/images/clktw13gd0pfn1ina06jadtzu.png

1337

Social media links

Comments (0)