We've tested the new RCE in Microsoft Outlook (CVE-2024-21378) in a production environment and confirm it works well!A brief instruction for red teams:
1. Compile our enhanced DLL (https://gist.github.com/Homer28/7f3559ff993e2598d0ceefbaece1f97f);
2. Use NetSPI's ruler and wait!