POC详情： f8b0748868dd4385dfab312ed4f87704e85a44cf

来源
https://github.com/Captain404/Follina-CVE-2022-30190-PoC-sample
关联漏洞
标题： Microsoft Windows Support Diagnostic Tool 操作系统命令注入漏洞 (CVE-2022-30190)
描述：Microsoft Windows Support Diagnostic Tool是美国微软（Microsoft）公司的收集信息以发送给 Microsoft 支持的工具。 Microsoft Windows Support Diagnostic Tool (MSDT)存在操作系统命令注入漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows
描述
Educational Follina PoC Tool
介绍
# Follina-CVE-2022-30190-PoC-sample
 Educational Follina PoC Tool

![image](_github_images/tool1.png)

![image](_github_images/tool2.png)

![image](_github_images/tool3.png)

![image](_github_images/tool4.png)

# Version history

v1.1 — JavaScript payload obfuscation

v1.0 — Initial release

# Features
+ .RTF payload generator
+ Simple HTTP Server for payload
+ Mitigation tips
+ Configuration extractor
+ Easy to use for learning

## PoC Exploit Executed Successfully
![image](_github_images/tool-running.png)
文件快照

 [4.0K]  /data/pocs/f8b0748868dd4385dfab312ed4f87704e85a44cf
├── [3.3K]  app.manifest
├── [ 852]  App.xaml
├── [ 327]  App.xaml.cs
├── [ 595]  AssemblyInfo.cs
├── [4.0K]  bin
│   └── [4.0K]  Release
│       └── [4.0K]  net6.0-windows
│           ├── [4.0K]  Files
│           │   ├── [2.5K]  JavaScript.txt
│           │   └── [8.7K]  RTF.txt
│           ├── [ 403]  Follina_PoC.deps.json
│           ├── [420K]  Follina_PoC.dll
│           ├── [274K]  Follina_PoC.exe
│           ├── [ 355]  Follina_PoC.runtimeconfig.json
│           └── [4.0K]  Images
│               └── [126K]  ethical.ico
├── [4.0K]  Dark
│   ├── [ 11K]  Button.xaml
│   ├── [ 19K]  Common.xaml
│   ├── [8.9K]  RadioButton.xaml
│   ├── [4.4K]  TabControl.xaml
│   ├── [5.1K]  TabItem.xaml
│   └── [8.9K]  TextBox.xaml
├── [4.0K]  Files
│   ├── [2.5K]  JavaScript.txt
│   └── [8.7K]  RTF.txt
├── [2.2K]  FollinaExtractor.cs
├── [1.5K]  Follina_PoC.csproj
├── [ 414]  Follina_PoC.csproj.user
├── [1.1K]  Follina_PoC.sln
├── [4.0K]  _github_images
│   ├── [ 56K]  tool1.png
│   ├── [ 33K]  tool2.png
│   ├── [ 30K]  tool3.png
│   ├── [ 67K]  tool4.png
│   └── [498K]  tool-running.png
├── [4.0K]  Images
│   ├── [126K]  ethical.ico
│   ├── [102K]  scheme.png
│   └── [8.0K]  tube.png
├── [ 18K]  LICENSE
├── [ 10K]  MainWindow.xaml
├── [2.9K]  MainWindow.xaml.cs
├── [1.1K]  PayloadGenerator.cs
├── [ 516]  README.md
└── [1.3K]  WebServer.cs

9 directories, 37 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。