let’s play with a ZERO-DAY vulnerability “follina”

In this video NetworkChuck teamed up with @_JohnHammond to talk about the NEW and SCARY Microsoft Vulnerability. NetworkChuck and John Hammond are going to teach you about a new dangerous Windows Zero-day vulnerability called “follina” and they are even going to show you how to test it out in your own Zero-day lab using VirtualBox!! Dubbed CVE-2022-30190, this vulnerability takes advantage of the Microsoft Support Diagnostic Tool (msdt) in Microsoft Office. So far, we have seen it the exploit successfully occur with Microsoft Word utilized .doc and .rtf variants. This is a high severity exploit given the remote code execution.

SPECIAL THANKS to John Hammond (go check him out!!)
---------------------------------------------------

**Sponsored by ITProTV

SUPPORT NETWORKCHUCK
---------------------------------------------------

READY TO LEARN??
---------------------------------------------------

FOLLOW ME EVERYWHERE
---------------------------------------------------

0:00 ⏩ Intro
1:58 ⏩ How does CVE-2022-30190 work??
6:33 ⏩ What happens when you open the file?
9:23 ⏩ Let’s set up our zero-day vulnerability lab!
17:29 ⏩Time to test the Malware!
20:00 ⏩ Outro

AFFILIATES & REFERRALS
---------------------------------------------------
(GEAR I USE...STUFF I RECOMMEND)

#follina #cve202230190 #microsoft

[NetworkChuck]

SPECIAL THANKS to John Hammond (go check him out!!)




**Sponsored by ITProTV

0:00 ⏩ Intro
1:58 ⏩ How does CVE-2022-30190 work??
6:33 ⏩ What happens when you open the file?
9:23 ⏩ Let’s set up our zero-day vulnerability lab!
17:29 ⏩Time to test the Malware!
20:00 ⏩ Outro

[andyh]

Thanks for keeping the “mistakes” in the video. It reinforces the information sooo much better !

[_JohnHammond]

HUGE thanks for letting me come crash the party, NetworkChuck!! Looking forward to all the crazy cool stuff we can do in the future 😎

[marcfer]

It was amazing seeing Chuck test a real vunerability, this could be a very interesting series on your channel!

[gamereditorner]

Zero-day vulnerability is scary and should be consider to learn with caution. Thank you for the information and keep it up!

[kronedog]

Thank you Network Chuck for making this video so quickly and of course thanks to John Hammond. I followed along and indeed was fun to play around with.

[mrnobodyatallnoneed]

As an ethical hacker in making, I really appreciated this video, very informative as always, thanks, Chuck!

[gregatit]

As a middle aged bearded geek going through A+ cert after years of computer nerdery, your videos always ring true to what I seem to be learning at any moment be it bash, be it ip sucking at subnetting or zero day exploits…Chuck you are tuned in to what so many delicious topics! Thanks for being our coffee! ☕️

[Kevinmulhalljr]

Definitely would like to see more of these type of videos. As a user of the 365 support and recovery tool for troubleshooting tenant issues I’m wondering how vulnerable the program is to being exploited, especially not knowing how superficial endpoint scanning is…

[keithcooper]

Very interesting video. I've been playing with python for the last 5 or 6 months, but never knew you could make a webserver like that. Great content!!!

[gerardest]

Chuck definitely do more stuff like that!!

[jasonholtham]

Thank you for this video, relateable content as im in the cyber security field. Would definatly be intersted in more content like this.

[ChristianPixtun]

You should really do a playlist explaining these vulnerabilities.
Yes, there are channels explaining this stuff, but with you and your way of teaching things, explaining a CVE and how it works is a must for security professionals, especially if they want to be blue or red team pros, or even us, who are just passionate of these things.

Do a

[mikalichou]

Man, after months of "20mn video to explain if/else" it's really really nice to see again full power highly caffeinated Chuck

[Asherstitusworld]

Super Video Chuck Your videos are awesome And informative

[stepsxa]

Windows Defender seems to have caught up with Follina. Word still reaches out to the server, but that's it. You get a warning and nothing else is happening - at least with my setup, don't feel too safe. I really like the idea of Chuck and John making content as a team, by the way!

[djscuffedjays]

Amazing collab! Been following both of you for a while, awesome to see!

[meercat]

2 of my favorite youtubers looking at one of my favorite zero days

[plousho]

its really awesome that this video references what you learn in the Hack the box course.

[cleightthejw]

@NetWorkChuck

Yes, you should keep doing vids like this. The good thing to this would be your growing along the way AND bringing others with you as they learn these things too!