chvancooten/follina.py

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1139 stars · 247 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A proof-of-concept Python script that replicates the 'Follina' MS-MSDT Microsoft Office remote code execution vulnerability for local testing. It generates malicious docx/rtf payload documents and serves the exploit payload via a configurable built-in web server.

Use cases

• replicate the follina office rce vulnerability for testing
• generate a malicious docx or rtf payload for security testing
• test endpoint detection of ms-msdt exploit documents
• run a local web server hosting an exploit html payload
• verify office hardening against follina-style attacks

When to choose

• you need a quick, configurable POC of the Follina MS-MSDT RCE for red team or detection testing
• you want to generate both docx and rtf payload variants with custom commands or binaries

When to avoid

• you need a production-safe or stealthy offensive tool
• you require a maintained tool with a license or ongoing support
• you are testing vulnerabilities other than Follina/MS-MSDT

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing developer-tools python cli cross-platform exploit-poc follina ms-msdt office-rce red-team vulnerability-replication

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chvancooten/follina.py")