CVE-2023-36745

CVE-2023-36745 Microsoft Exchange Server CVE-2023-36745 RCE PoC. Example: root@kitploit: python3 exp.py -H exchange.webdxg.com -u webdxg.com\dddai -p 4IDF7LAU -s \192.168.237.131\Shares\ -c calc.exe Command will be passed to powershell -e...

CVE-2022-41080

CVE-2022-41080 Desc CrowdStrike recently discovered a new exploit method called OWASSRF consisting of CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution RCE through Outlook Web Access OWA. The new exploit method bypasses URL rewrite mitigations for the Autodiscover endpoint provid...

cve-2020-0688-webshell-upload-technique

Exchange Remote Code Execution cve-2020-0688 - RED TEAM MODE ON require: python3+ UNIVERSAL Python implementation for cve-2020-0688, utilizing ASPX webshell for custom command output This just a POC to facilitate vulnerability demostrations for security reasons. I disapprove every illegal actions...

ProxyLogon

Disclaimer: All the information provided in this repository is for educational and research purposes only. The autor is no way responsible for any misuse of the information or code present here. To use this exploit in a safe pre-configured environment check out...

CVE-2022-41040

CVE-2022-41040 Microsoft Exchange vulnerable to server-side request forgery Payload : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHERE...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server Poc The patch:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] Single retrieval python sendwebshellmail.py https://mail16.echod.com crack Batch read emails from mail.txt and attempt to obtain SID tokens python sendwebshellmail.py https://mail16.echod.com [email protected] send on...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为：1500 / 5000 = 30%...

CVE-2021-34473-NMAP-SCANNER

CVE-2021-34473-NMAP-SCANNER A massive scanner for CVE-2021-34473 Microsoft Exchange Windows Vulnerability Commands root@kitploit: nmap -iR 500000 -n -p 443 --script cve202134473.nse scan500k.txt nmap website.com -n -p 443 --script cve202134473.nse Example root@kitploit: Starting Nmap 7.92...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

Exchange_IOC_Hunter

ExchangeIOCHunter Description: Hunt for IOCs in IIS Logs - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 Artefacts Supported: C2 IP Addresses used for scanning and exploitation File Names observed in exploitation attempts Remote Code Execution RCE Usage: root@kitploit: powershell...

CVE-2021-33766-ProxyToken

CVE-2021-33766 ProxyToken Supports single target detection and batch detection, supports email forwarding rule modification Usage Vulnerability detection and email forwarding rule modification Email forwarding rule modification result Email sending test References...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle root@kitploit: Once a victim clicks this link, evil.com will receive the cookies...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner This script scans an IP/range/CIDR and outputs the Microsoft Exchange Servers and Versions discovered. The specified IP/range/CIDR will be scanned with masscan on port tcp/443. After a successful scan it tries to HTTP GET "/owa/auth/logon.aspx" with curl to grab the Outlook...

ecp_slap

ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...

CVE-2022-41040

CVE-2022-41040 Plantilla nuclei para CVE-2022-41040 ¡No verificado! Uso root@kitploit: git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml root@kitploit: GET...

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...