[Farfallaiero]

CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an email/meeting invite - when the reminder triggers in Outlook, the user's Outlook client attempts to load the sound file specified in the path. If Outlook attempts to initiate an SMB connection to a remote SMB server, it might be possible for the attacker to intercept the user's Net-NTLMv2 hash and relay this to authenticate as the user.

Hidden Content

You must register or login to view this content.

[pest]

very fun to look at these!

[deadlock18]

Hope this work good sir thank you ?

[d3t3dttt]

Thanks for sharing

[diexl02]

smell me mayne....

[Polo_man]

Thanks for sharing

[SATISFIEDNK]

CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an email/meeting invite - when the reminder triggers in Outlook, the user's Outlook client attempts to load the sound file specified in the path. If Outlook attempts to initiate an SMB connection to a remote SMB server, it might be possible for the attacker to intercept the user's Net-NTLMv2 hash and relay this to authenticate as the user.

w bro i mean this is a really cool thing yk my nigga

[trikomarleyjr]

thank you bro good post

[Vapulame]

am aware all the payload needs is just a "!" to break shit lol

[Haungu]

Much appreciation! Stellar job! You're absolutely amazing.