CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
Switch branches/tags
Nothing to show
Clone or download
Latest commit afa34ec Sep 14, 2017
Failed to load latest commit information. Update Sep 14, 2017
blob.bin Add content Sep 13, 2017
exploit.txt Add content Sep 13, 2017

CVE-2017-8759 Weaponisation PoC

This repository contains data that can be used to weaponise the CVE-2017-8759 vulnerability.

For full information visit to find the post related to this vulnerability.

As always, my research is aimed to help the community become more aware of rising threats as well as the adversary simulation community to better simulate realistic threats against our client base in order to better educate and inform them. My research should not be used against a target without prior consent.

Video for weaponisation can be found at


Credits to myself, Vincent Yiu @vysecurity for the weaponisation in RTF form with no interaction required. Credits to @voulnet for the exploit.txt.