Lucene search
+L

3051 matches found

Kitploit
Kitploit
added 2026/08/28 4:02 a.m.7 views

ExchangeSmash

proxylogon प्रॉक्सीलोगॉन श्रृंखला Microsoft Exchange Server - CVE-2021-26855 के लिए मेरा शोषण चलाएँ: शोषण Impacket पैकेज का उपयोग करता है, इसे स्थापित करने के लिए यह चलाएँ: root@kitploit: user@host:$ python3 -m pip install impacket फिर शोषण रिपॉजिटरी को क्लोन करें, और शोषण निर्देशिका में प्रवेश...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 4:02 a.m.6 views

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Reproducing ProxyShell Exploit https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ This is NOT your Cyberweapon just a experimental PoC...

10CVSS9AI score0.99999EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/28 4:01 a.m.3 views

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

9.8CVSS8.9AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/28 3:59 a.m.3 views

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork:app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为:1500 / 5000 = 30%...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits65References1
Kitploit
Kitploit
added 2026/08/28 3:52 a.m.2 views

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

10CVSS8.6AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/08/28 3:21 a.m.4 views

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

10CVSS8.1AI score0.99999EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/28 2:08 a.m.5 views

CVE-2018-8581

CVE-2018-8581 This is a lateral movement and privilege escalation vulnerability at the mailbox level Once you have the credentials of an ordinary mailbox account, it allows you to delegate and take over the inboxes of other users including domain administrators This EXP script is an enhanced...

7.4CVSS7.8AI score0.27355EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/08/28 1:33 a.m.5 views

CVE-2021-26855_PoC

CVE-2021-26855PoC I miei primi payload SSRF CVE-2021-26855 su Exchange Server 2019... Payload 1 root@kitploit: curl -i -s -k -X $'GET' -H $'Host: ' -H $'User-Agent: alex666' -H $'Connection: close' -b $'X-AnonResource=true;...

9.8CVSS8.8AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/27 11:34 p.m.3 views

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855, noto anche come Proxylogon, è una vulnerabilità di server-side request forgery SSRF in Exchange che consente a un attaccante di inviare richieste HTTP arbitrarie e autenticarsi come server Exchange. Secondo Orange Tsai, il ricercatore che ha scoperto le vulnerabilit...

9.8CVSS8.8AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/27 11:32 p.m.5 views

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC è un semplice script PowerShell che viene eseguito sui server Exchange per identificare indicatori di compromissione IOC dall'attività di Hafnium rilasciata da Mircosoft il 02-03-2021 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. L...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 9:57 p.m.2 views

CVE-2021-26855

CVE-2021-26855-PoC Codice PoC dell'exploit per CVE-2021-26855. Il codice originale è stato sviluppato da https://github.com/GreyOrder. Il repository originale è stato eliminato poco dopo l'aggiunta di funzionalità aggiuntive enumerazione utenti, ecc.. Se hai l'ultima versione, invia una pull...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits65References1
Kitploit
Kitploit
added 2026/08/27 8:20 p.m.2 views

ProxyShell

ProxyShell Installazione root@kitploit: git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Utilizzo root@kitploit: python3 exploit.py...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 8:08 p.m.2 views

exchange-scanner

Scanner do Microsoft Exchange Server Descrição Esta ferramenta verifica vários serviços comuns expostos publicamente num host alvo, a fim de detetar o Microsoft Exchange Server e, se possível, identificar a versão do seu software através de impressão digital. Para tal, utiliza as seguintes...

5.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/27 7:55 p.m.2 views

CVE-2020-0688

CVE-2020-0688 Scanner Questo è un piccolo script sporco per verificare la presenza di server Exchange vulnerabili a CVE-2020-0688 È scritto male ed in PHP. Attenzione: controlla solo se hai installato l'aggiornamento CU attuale. Ciò non significa che hai installato la patch di correzione! Requisi...

9CVSS8.8AI score0.99965EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/08/27 7:24 p.m.3 views

NtlmRelayToEWS

ntlmRelayToEWS Autore: Arno0x0x - @Arno0x0x ntlmRelayToEWS è uno strumento per eseguire attacchi di relay NTLM su Exchange Web Services EWS. Avvia un SMBListener sulla porta 445 e un HTTPListener sulla porta 80, in attesa di una connessione in arrivo dalla vittima. Quando la vittima si connette a...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 5:11 p.m.4 views

ProxyLogon

ProxyLogon Python3 के लिए ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell root@kitploit: usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/08/27 4:26 p.m.2 views

CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei-Vorlage Unverifiziert! Verwendung root@kitploit: git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml root@kitploit: GET...

8.8CVSS7.6AI score0.99956EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 4:14 p.m.3 views

http-vuln-CVE-2022-41082

LA VERSIONE AGGIORNATA CONSENTE ANCHE IL CONTROLLO HTTPS exchange-vuln-check.nse PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

8CVSS6.9AI score0.9997EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/27 3:39 p.m.134 views

ruler

Introduction Ruler is a tool that allows you to interact with Exchange servers remotely, through either the MAPI/HTTP or RPC/HTTP protocol. The main aim is abuse the client-side Outlook features and gain a shell remotely. The full low-down on how Ruler was implemented and some background regardin...

6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/08/27 3:07 p.m.4 views

CVE-2018-8581

CVE-2018-8581 Si tratta di una vulnerabilità di movimento laterale e di escalation dei privilegi a livello di mailbox Consente, dopo aver ottenuto le credenziali di un account di posta normale, di prendere il controllo della casella di posta di altri utenti inclusi gli amministratori di dominio...

7.4CVSS8AI score0.27355EPSS
SaveExploits7References1
Rows per page
Query Builder