来源

关联漏洞

描述

Project on CVE-2022-30190 exploitation and mitigation strategies

介绍

# ICT287_CVE-2022-30190_Exploit
Project on CVE-2022-30190 exploitation and mitigation strategies
## 📌 About
This repository contains my final project for ICT287, where I explore the CVE-2022-30190 ("Follina") vulnerability. The project covers:
- Detailed analysis of the exploit
- Step-by-step execution process
- Mitigation strategies

## 🔥 Exploitation Demo
- Attacker Machine: Kali Linux 2024.1
- Victim Machine: Windows 10 Pro (Version 1809)
- Exploitation method: Malicious Word document executing remote code via MSDT
- Microsoft Office Pro Plus 2019 16.0.10325.20118

## 🛡️ Mitigation
- Disable MSDT URL Protocol
- Apply Microsoft Updates
- Enable Microsoft Defender with Cloud Protection

## 🔗 References
- [Microsoft CVE-2022-30190 Advisory](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30190)
- [Follina Exploiter GitHub Repo](https://github.com/Hrishikesh7665/Follina_Exploiter_CLI)

## Credits & Acknowledgements
This project includes code from [Hrishikesh7665/Follina_Exploiter_CLI](https://github.com/Hrishikesh7665/Follina_Exploiter_CLI), 
which is licensed under [The Unlicense](https://unlicense.org/).

---

文件快照

 [4.0K]  /data/pocs/285f2916516e715dda1dda67e0cd1f9b46fd590a
├── [7.2M]  ICT 287 Explotation Final Report_git.docx
└── [1.1K]  README.md

0 directories, 2 files

备注