lockedbyte/CVE-2021-40444

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1800 stars · 473 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept exploit generator for CVE-2021-40444, a Microsoft Office Word remote code execution vulnerability. It generates malicious DOCX documents embedding a supplied DLL payload and hosts the exploit files over HTTP for testing in a Windows VM.

Use cases

• generate a malicious docx exploiting CVE-2021-40444
• test Office RCE payloads in an isolated Windows VM
• reproduce the in-the-wild CVE-2021-40444 attack sample
• host exploit cab and html files for a controlled exploit chain
• study how weaponized Office documents deliver DLL payloads

When to choose

• you are a security researcher reproducing or analyzing CVE-2021-40444
• you need a ready-made PoC generator for Office document exploit testing
• you want to verify defenses against malicious DOCX/CAB exploit chains

When to avoid

• you need a maintained, production-grade exploitation framework
• you want general-purpose malware analysis tooling rather than a single-CVE PoC
• your environment forbids offensive security tooling or the project's lack of a license is a concern

Facets

cli-tool · maturity maintenance

security penetration-testing reverse-engineering cli security penetration-testing reverse-engineering python cli exploit cve-2021-40444 poc malicious-docx microsoft-office rce weaponization linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lockedbyte/CVE-2021-40444")