JohnHammond/msdt-follina

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1630 stars · 370 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI tool that generates malicious Microsoft Word documents exploiting the MS-MSDT 'Follina' vulnerability (CVE-2022-30190) and stages payloads via a built-in HTTP server. It is intended for security research and penetration testing demonstrations.

Use cases

• generate a follina maldoc for penetration testing
• demonstrate the msdt follina vulnerability
• test antivirus detection of malicious word documents
• stage a payload over http for a red team exercise
• pop calc or a reverse shell on a target windows machine in a lab

When to choose

• you are a security researcher or pentester reproducing CVE-2022-30190
• you need a quick proof-of-concept maldoc generator for authorized testing
• you want a simple self-contained Python script with an integrated payload server

When to avoid

• you need a production-grade or stealthy red team toolkit
• you lack explicit authorization to test target systems
• you need maintained tooling - the project has no license and appears dormant since 2022

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing developer-tools python cli cross-platform follina msdt exploit maldoc red-team vulnerability cve-2022-30190 linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="JohnHammond/msdt-follina")