TryHackMe Moniker Link (CVE-2024–21413) Write-Up

Task 1 Introduction

The CVE-2024–21413 vulnerability circumvents Outlook’s security protocols when processing a particular form of hyperlink referred to as a Moniker Link. Exploiting this flaw, an attacker can send an email containing a harmful Moniker Link to a target, prompting Outlook to transmit the user’s NTLM credentials to the attacker upon clicking the hyperlink.

Task 2 Moniker Link (CVE-2024–21413)

1. Outlook can render emails as HTML
2. Outlook can parse hyperlinks such as HTTP and HTTPS
3. Outlook can open URLs that …

cve cybersecurity tryhackme tryhackme-walkthrough windows