Lucene search
+L

3051 matches found

Kitploit
Kitploit
added 2026/08/28 1:16 p.m.2 views

106362522

106362522 最近、マイクロソフトが発表したExchange Serverのハッカー攻撃に対するパッチに関連して、台湾のDEVCOREは、1月5日に既にセキュリティ脆弱性を発見し、マイクロソフトに「CVE-2021-26855」および「CVE-2021-27065」と命名されたゼロデイ脆弱性を報告し、この脆弱性を「ProxyLogon」と呼んでいたことを明らかにした。 今回明らかになった「ProxyLogon」脆弱性は、認証不要で使用可能なリモートコード実行(Pre-Auth Remote Code Execution; Pre-Auth...

7.8CVSS7.3AI score0.99876EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/08/28 12:59 p.m.2 views

CVE-2023-36745

CVE-2023-36745 Эксплойт RCE CVE-2023-36745 для Microsoft Exchange Server. Пример: root@kitploit: python3 exp.py -H exchange.webdxg.com -u webdxg.com\dddai -p 4IDF7LAU -s \192.168.237.131\Shares\ -c calc.exe Команда будет передана в powershell -e...

8CVSS7.1AI score0.81138EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 11:05 a.m.2 views

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 10:52 a.m.3 views

CVE-2021-26855-Scanner

CVE-2021-26855-Scanner Scanner e PoC per CVE-2021-26855 Crediti a GreyOrder per il PoC. Ricaricato per comodità e perché Microsoft lo ha rimosso almeno una volta : Esempio di utilizzo per la scansione di massa: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d...

9.8CVSS7.3AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 10:29 a.m.3 views

PSForgot2kEyXCHANGE

PSForgot2kEyXCHANGE PoC per Forgot2kEyXCHANGE CVE-2020-0688 scritto in PowerShell Utilizzo Questo PoC richiede un nome utente e una password validi. Questo PoC utilizza ysoserial.net per creare il nuovo ViewState che contiene il comando specificato nel parametro -Command. Se non lo hai già...

9CVSS7.3AI score0.99965EPSS
SaveExploits29References1
Kitploit
Kitploit
added 2026/08/28 9:49 a.m.2 views

ProxyLogon

ProxyLogon ProxyLogon CVE-2021-26855 का औपचारिक सामान्य नाम है, जो Microsoft Exchange Server पर एक कमजोरी है जो हमलावर को प्रमाणीकरण को बायपास करने और व्यवस्थापक के रूप में प्रतिरूपण करने की अनुमति देती है। हमने इस बग को एक अन्य पोस्ट-ऑथ मनमानी फ़ाइल लेखन कमजोरी, CVE-2021-27065, के साथ जोड़कर कोड...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/28 7:53 a.m.3 views

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855 SSRF Einfache Ausnutzung Golang-Übung Betroffene Versionen Exchange Server 2013 vor CU23 Exchange Server 2016 vor CU18 Exchange Server 2019 vor CU7 Nutzungsbedingungen Diese Schwachstelle unterscheidet sich von früheren Exchange-Schwachstellen. Sie erfordert keine...

9.8CVSS7.3AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 6:34 a.m.3 views

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server PoC La patch: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

8.8CVSS7.3AI score0.91737EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/28 6:12 a.m.2 views

CVE-2020-0688

CVE-2020-0688 توجد ثغرة تنفيذ كود عن بُعد في Microsoft Exchange Server عندما يفشل الخادم في إنشاء مفاتيح فريدة بشكل صحيح أثناء التثبيت. تسمح معرفة مفتاح التحقق لمستخدم مصادق عليه يمتلك صندوق بريد بتمرير كائنات عشوائية ليتم إلغاء تسلسلها بواسطة تطبيق الويب، الذي يعمل بصلاحيات SYSTEM. حول الثغرة تم...

9CVSS7.3AI score0.99965EPSS
SaveExploits29References1
Nuclei
Nuclei
added 2026/08/28 4:35 a.m.35 views

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

10CVSS9.8AI score0.83214EPSS
SaveExploits4References5
Kitploit
Kitploit
added 2026/08/28 4:02 a.m.7 views

ExchangeSmash

proxylogon il mio exploit per la catena proxylogon Microsoft Exchange Server - CVE-2021-26855 Esecuzione: l'exploit usa il pacchetto Impacket, per installarlo esegui: root@kitploit: user@host:$ python3 -m pip install impacket poi clona il repository dell'exploit ed entra nella directory...

9.8CVSS7.3AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 4:02 a.m.6 views

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Vulnerabilidade de Execução Remota de Código no Microsoft Exchange Server Reproduzindo o Exploit ProxyShell https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ Isto NÃO é a sua arma cibernética, apenas um PoC experimental...

10CVSS7.3AI score0.99999EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/28 4:01 a.m.3 views

ProxyLogon

ProxyLogon ProxyLogon è il nome generico formale per CVE-2021-26855, una vulnerabilità su Microsoft Exchange Server che consente a un aggressore di bypassare l'autenticazione e impersonare l'amministratore. Abbiamo anche concatenato questo bug con un'altra vulnerabilità post-autenticazione di...

9.8CVSS7.1AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 3:59 a.m.3 views

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork: app:"Microsoft Exchange Server" Script escrito com o kit de ferramentas Seebug e o pocsuite3 MicrosoftExchangeServerSSRFCVE-2021-26855.py, para sondar dados do último ano: Taxa de sucesso de aproximadamente: 1500 / 5000 = 30%...

9.8CVSS7.3AI score0.99996EPSS
SaveExploits65References1
Kitploit
Kitploit
added 2026/08/28 3:52 a.m.2 views

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Vulnerabilità di esecuzione remota di codice su Microsoft Exchange Server. Questa errata normalizzazione degli URL ci permette di accedere a un URL arbitrario del backend mentre siamo eseguiti come account macchina del server Exchange. Sebbene questo bug n...

10CVSS7AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/08/28 3:21 a.m.4 views

Proxyshell-Scanner

Proxyshell-Scanner Scanner nuclei per la RCE di Proxyshell CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 scoperta da Orange Tsai al Pwn2Own, che colpisce Microsoft Exchange Server. POC Risorse https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

10CVSS7AI score0.99999EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/28 2:08 a.m.5 views

CVE-2018-8581

CVE-2018-8581 Questa è una vulnerabilità di movimento laterale e privilege escalation a livello di cassetta postale. Consente, dopo aver ottenuto le credenziali di un account di posta con privilegi normali, di assumere la delega della cassetta postale inbox di altri utenti, inclusi gli...

7.4CVSS7.2AI score0.27355EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/08/28 1:33 a.m.5 views

CVE-2021-26855_PoC

CVE-2021-26855PoC I miei primi payload SSRF CVE-2021-26855 su Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

9.8CVSS8.8AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/27 11:34 p.m.4 views

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855, noto anche come Proxylogon, è una vulnerabilità di server-side request forgery SSRF in Exchange che consente a un attaccante di inviare richieste HTTP arbitrarie e autenticarsi come server Exchange. Secondo Orange Tsai, il ricercatore che ha scoperto le vulnerabilit...

9.8CVSS8.8AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/27 11:32 p.m.5 views

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC è un semplice script PowerShell che viene eseguito sui server Exchange per identificare indicatori di compromissione IOC dall'attività di Hafnium rilasciata da Mircosoft il 02-03-2021 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. L...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder