Moniker Link (CVE-2024-21413) -- Detailed Walkthrough

📚 Resources:
Enroll in my Courses (search for Tyler Ramsbey)

Support me on Ko-Fi

Join Hack Smarter
--- In this video I work through the Moniker Link (CVE-2024-21413) room on TryHackMe. The vulnerability bypasses Outlook's security mechanisms when handing a specific type of hyperlink known as a Moniker Link. An attacker can abuse this by sending an email that contains a malicious Moniker Link to a victim, resulting in Outlook sending the user's NTLM credentials to the attacker once the hyperlink is clicked.

We go through the theory as well as get hands-on practice by exploiting a vulnerable server.

Enjoy!! ----------
This content is intended for educational purposes only. All demonstrations and techniques shown are designed to teach ethical hacking and improve cybersecurity. Any use of the information provided in these videos is done at your own risk and should be used responsibly. Unauthorized hacking, illegal activities, or violations of privacy are not endorsed or encouraged. Always ensure you have proper authorization before attempting any security testing or hacking.

[ThePabloEskobear]

Thanks again for another great video to save the day. Nearly flipped my desk trying to solve Task 3 Q2. LOL

[CarlosCoronaCrown]

You are a wizard, homie! Thank you for this detailed walkthrough.

[kartheekkandalam]

Hi Tyler.... Thanks for the video.... very helpful
But I need to demonstrate this vuln as part of my coursework in my own machine can you please suggest few ways how to do it without RDP or tryhackme attack box?

[ddxsHx]

My favorite part is when he saved the modified butter

[GooseLocal]

Hello to all newbie pentesters, can I have a link to the discord?